Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Производитель ПО
Наименование ПО
Apache HTTP Server
(1.3.0, 1.3.40-dev, 2.0.35, 2.0.62-dev, 2.2.0, 2.2.7-dev)
Apache
(B.2.0.59.00.2)
httpd
(Unknown)
mod_ssl
(Unknown)
Описание
Межсайтовое выполнение сценариев в модуле mod_imap и в модуле mod_imagemap в Apache HTTP Server позволяет злоумышленникам, действующим удаленно, внедрять произвольные веб-сценарии или HTML-код.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://www.apache.org/
http://www.apache.org/
Ссылки
http://httpd.apache.org/security/vulnerabilities_13.html
http://httpd.apache.org/security/vulnerabilities_20.html
http://httpd.apache.org/security/vulnerabilities_22.html
FRSIRT (ADV-2007-4201): http://www.frsirt.com/english/advisories/2007/4201
FRSIRT (ADV-2007-4202): http://www.frsirt.com/english/advisories/2007/4202
AIXAPAR (PK58024): http://www-1.ibm.com/support/docview.wss?uid=swg1PK58024
BID (26838): http://www.securityfocus.com/bid/26838
FRSIRT (ADV-2007-4301): http://www.frsirt.com/english/advisories/2007/4301
SECTRACK (1019093): http://securitytracker.com/id?1019093
AIXAPAR (PK58074): http://www-1.ibm.com/support/docview.wss?uid=swg1PK58074
FRSIRT (ADV-2008-0084): http://www.frsirt.com/english/advisories/2008/0084
MANDRIVA (MDVSA-2008:014): http://www.mandriva.com/security/advisories?name=MDVSA-2008:014
MANDRIVA (MDVSA-2008:015): http://www.mandriva.com/security/advisories?name=MDVSA-2008:015
REDHAT (RHSA-2008:0004): http://www.redhat.com/support/errata/RHSA-2008-0004.html
REDHAT (RHSA-2008:0005): http://www.redhat.com/support/errata/RHSA-2008-0005.html
REDHAT (RHSA-2008:0006): http://www.redhat.com/support/errata/RHSA-2008-0006.html
REDHAT (RHSA-2008:0007): http://www.redhat.com/support/errata/RHSA-2008-0007.html
REDHAT (RHSA-2008:0008): http://www.redhat.com/support/errata/RHSA-2008-0008.html
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200801e.html
MANDRIVA (MDVSA-2008:016): http://www.mandriva.com/security/advisories?name=MDVSA-2008:016
FRSIRT (ADV-2008-0178): http://www.frsirt.com/english/advisories/2008/0178
http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm
UBUNTU (USN-575-1): http://www.ubuntu.com/usn/usn-575-1
HP (HPSBUX02308): http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
FRSIRT (ADV-2008-0398): http://www.frsirt.com/english/advisories/2008/0398
OSVDB (39134): http://www.osvdb.org/39134
http://httpd.apache.org/security/vulnerabilities_20.html
http://httpd.apache.org/security/vulnerabilities_22.html
FRSIRT (ADV-2007-4201): http://www.frsirt.com/english/advisories/2007/4201
FRSIRT (ADV-2007-4202): http://www.frsirt.com/english/advisories/2007/4202
AIXAPAR (PK58024): http://www-1.ibm.com/support/docview.wss?uid=swg1PK58024
BID (26838): http://www.securityfocus.com/bid/26838
FRSIRT (ADV-2007-4301): http://www.frsirt.com/english/advisories/2007/4301
SECTRACK (1019093): http://securitytracker.com/id?1019093
AIXAPAR (PK58074): http://www-1.ibm.com/support/docview.wss?uid=swg1PK58074
FRSIRT (ADV-2008-0084): http://www.frsirt.com/english/advisories/2008/0084
MANDRIVA (MDVSA-2008:014): http://www.mandriva.com/security/advisories?name=MDVSA-2008:014
MANDRIVA (MDVSA-2008:015): http://www.mandriva.com/security/advisories?name=MDVSA-2008:015
REDHAT (RHSA-2008:0004): http://www.redhat.com/support/errata/RHSA-2008-0004.html
REDHAT (RHSA-2008:0005): http://www.redhat.com/support/errata/RHSA-2008-0005.html
REDHAT (RHSA-2008:0006): http://www.redhat.com/support/errata/RHSA-2008-0006.html
REDHAT (RHSA-2008:0007): http://www.redhat.com/support/errata/RHSA-2008-0007.html
REDHAT (RHSA-2008:0008): http://www.redhat.com/support/errata/RHSA-2008-0008.html
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200801e.html
MANDRIVA (MDVSA-2008:016): http://www.mandriva.com/security/advisories?name=MDVSA-2008:016
FRSIRT (ADV-2008-0178): http://www.frsirt.com/english/advisories/2008/0178
http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm
UBUNTU (USN-575-1): http://www.ubuntu.com/usn/usn-575-1
HP (HPSBUX02308): http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
FRSIRT (ADV-2008-0398): http://www.frsirt.com/english/advisories/2008/0398
OSVDB (39134): http://www.osvdb.org/39134
