Apache multiple security vulnerabilities updated since 12.01.2008
Published:		24.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8559
Type:		remote
Level:		5/10
Description:		mod_proxy_balancer ñrossite scripting, crossite requests forgery, memory corruption, DoS, mod_proxy_ftp and mod_status, mod_negotiation - crossite scripting.

Affected:		APACHE : Apache 1.3
		APACHE : Apache 2.0
		APACHE : Apache 2.2
CVE:		CVE-2008-0005
		CVE-2007-6423
		CVE-2007-6422
		CVE-2007-6421
		CVE-2007-6420
		CVE-2007-6388

Original document		Minded Security Research Labs, Apache mod_negotiation Xss and Http Response Splitting (24.01.2008)
		sp3x_(at)_securityreason.com, SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS) (16.01.2008)
		sp3x_(at)_securityreason.com, SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability (12.01.2008)
		sp3x_(at)_securityreason.com, SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability (12.01.2008)

Discuss:

Read or add your comments to this news (0 comments)