CVE-2008-0005

Published: Jan 12, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

RHSA-2008:0005

vendor-advisory

x_refsource_REDHAT

GLSA-200803-19

vendor-advisory

x_refsource_GENTOO

28749

third-party-advisory

x_refsource_SECUNIA

HPSBUX02465

vendor-advisory

x_refsource_HP

3526

third-party-advisory

x_refsource_SREASON

SSRT090085

vendor-advisory

x_refsource_HP

20080110 SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability

mailing-list

x_refsource_BUGTRAQ

SSRT090208

vendor-advisory

x_refsource_HP

20080110 Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability

third-party-advisory

x_refsource_SREASONRES

FEDORA-2008-1695

vendor-advisory

x_refsource_FEDORA

27234

vdb-entry

x_refsource_BID

apache-modproxyftp-utf7-xss(39615)

vdb-entry

x_refsource_XF

28526

third-party-advisory

x_refsource_SECUNIA

RHSA-2008:0006

vendor-advisory

x_refsource_REDHAT

ADV-2008-0924

vdb-entry

x_refsource_VUPEN

RHSA-2008:0007

vendor-advisory

x_refsource_REDHAT

SSRT090192

vendor-advisory

x_refsource_HP

oval:org.mitre.oval:def:10812

vdb-entry

signature

x_refsource_OVAL

1019185

vdb-entry

x_refsource_SECTRACK

RHSA-2008:0008

vendor-advisory

x_refsource_REDHAT

FEDORA-2008-1711

vendor-advisory

x_refsource_FEDORA

RHSA-2008:0009

vendor-advisory

x_refsource_REDHAT

MDVSA-2008:014

vendor-advisory

x_refsource_MANDRIVA

29420

third-party-advisory

x_refsource_SECUNIA

APPLE-SA-2008-03-18

vendor-advisory

x_refsource_APPLE

http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm

x_refsource_CONFIRM

HPSBOV02683

vendor-advisory

x_refsource_HP

20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server

mailing-list

x_refsource_BUGTRAQ

28467

third-party-advisory

x_refsource_SECUNIA

29348

third-party-advisory

x_refsource_SECUNIA

RHSA-2008:0004

vendor-advisory

x_refsource_REDHAT

[security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server

mailing-list

x_refsource_MLIST

28607

third-party-advisory

x_refsource_SECUNIA

SUSE-SA:2008:021

vendor-advisory

x_refsource_SUSE

MDVSA-2008:015

vendor-advisory

x_refsource_MANDRIVA

http://docs.info.apple.com/article.html?artnum=307562

x_refsource_CONFIRM

HPSBUX02431

vendor-advisory

x_refsource_HP

28471

third-party-advisory

x_refsource_SECUNIA

USN-575-1

vendor-advisory

x_refsource_UBUNTU

29640

third-party-advisory

x_refsource_SECUNIA

28977

third-party-advisory

x_refsource_SECUNIA

ADV-2008-1875

vdb-entry

x_refsource_VUPEN

30732

third-party-advisory

x_refsource_SECUNIA

35650

third-party-advisory

x_refsource_SECUNIA

MDVSA-2008:016

vendor-advisory

x_refsource_MANDRIVA

[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1888194 [5/13] - /httpd/site/trunk/content/security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [6/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2008-0005

Description

Affected Products

References