CVE-2005-3352 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-3352
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3352

Description: Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.

CVE Status: Candidate

References: UBUNTU http://www.ubuntulinux.org/usn/usn-241-1 TRUSTIX http://www.trustix.org/errata/2005/0074/ SUSE http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html http://www.novell.com/linux/security/advisories/2006_43_apache.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1 ST 1015344 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.685483 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.470158 SGI SAID Secunia Advisory: SA17319 Secunia Advisory: SA18743 Secunia Advisory: SA18517 Secunia Advisory: SA18585 Secunia Advisory: SA18429 Secunia Advisory: SA18340 Secunia Advisory: SA18339 Secunia Advisory: SA18333 Secunia Advisory: SA18008 Secunia Advisory: SA18526 Secunia Advisory: SA19012 Secunia Advisory: SA20670 Secunia Advisory: SA21744 Secunia Advisory: SA22140 Secunia Advisory: SA22368 Secunia Advisory: SA22388 Secunia Advisory: SA22669 Secunia Advisory: SA23260 Secunia Advisory: SA20046 Secunia Advisory: SA25239 Secunia Advisory: SA29420 Secunia Advisory: SA29849 Secunia Advisory: SA30430 REDHAT http://rhn.redhat.com/errata/RHSA-2006-0159.html http://www.redhat.com/support/errata/RHSA-2006-0158.html http://rhn.redhat.com/errata/RHSA-2006-0692.html OPENPKG http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt MANDRIVA http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007 HP http://www.securityfocus.com/archive/1/archive/1/450321/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/450315/100/0/threaded http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449 http://www.securityfocus.com/archive/1/archive/1/445206/100/0/threaded GENTOO http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml FEDORA http://www.securityfocus.com/archive/1/archive/1/425399/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html DEBIAN http://www.debian.org/security/2006/dsa-1167 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 http://issues.apache.org/bugzilla/show_bug.cgi?id=37874 CERT http://www.us-cert.gov/cas/techalerts/TA08-150A.html BID 15834 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html http://lists.apple.com/archives/security-announce/2008//May/msg00001.html AIXAPAR http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only

Return to the previous page.