Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-2088
HistoryJul 05, 2005 - 4:00 a.m.

CVE-2005-2088

2005-07-0504:00:00
CWE-444
[email protected]
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

9.1

Confidence

High

EPSS

0.963

Percentile

99.6%

JSON

The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a “Transfer-Encoding: chunked” header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka “HTTP Request Smuggling.”

Affected configurations

NVD
Node
apachehttp_serverRange2.0.35–2.0.55
Node
debiandebian_linuxMatch3.0
OR
debiandebian_linuxMatch3.1

References

Related

freebsd 1
nessus 26
openvas 34
debiancve 1
httpd 1
cvelist 1
debian 4
cve 1
ubuntucve 1
osv 2
centos 1
ubuntu 1
suse 1
redhat 1
freebsd
freebsd
apache -- http request smuggling
2005-07-25 00:00:00
nessus
nessus
HP-UX PHSS_34203 : HP-UX VirtualVault running Apache 1.3.X Remote Unauthorized Access (HPSBUX02101 SSRT051128 rev.1)
2006-03-21 00:00:00
FreeBSD : apache -- http request smuggling (651996e0-fe07-11d9-8329-000e0c2e438a)
2005-08-01 00:00:00
HP-UX PHSS_34119 : HP-UX VirtualVault running Apache 1.3.X Remote Unauthorized Access (HPSBUX02101 SSRT051128 rev.1)
2006-03-21 00:00:00
openvas
openvas
SLES9: Security update for apache and mod_ssl
2009-10-10 00:00:00
Debian: Security Advisory (DSA-803-1)
2008-01-17 00:00:00
FreeBSD Ports: apache
2008-09-04 00:00:00
debiancve
debiancve
CVE-2005-2088
2005-07-05 04:00:00
httpd
httpd
Apache Httpd < 2.0.55 : HTTP Request Spoofing
2005-10-14 00:00:00
cvelist
cvelist
CVE-2005-2088
2005-06-30 04:00:00
debian
debian
[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling
2005-09-08 06:00:50
[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling
2005-09-08 06:00:50
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
2005-09-08 18:07:44
cve
cve
CVE-2005-2088
2005-07-05 04:00:00
ubuntucve
ubuntucve
CVE-2005-2088
2005-07-05 00:00:00
osv
osv
apache - programming error
2005-09-08 00:00:00
apache2 - several
2005-09-08 00:00:00
centos
centos
httpd, mod_ssl security update
2005-07-25 10:13:58
ubuntu
ubuntu
Apache 2 vulnerabilities
2005-08-04 00:00:00
suse
suse
authentication bypass in apache,apache2
2005-08-16 08:42:40
redhat
redhat
(RHSA-2005:582) httpd security update
2005-07-25 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

9.1

Confidence

High

EPSS

0.963

Percentile

99.6%

JSON
Related for NVD:CVE-2005-2088
freebsd1nessus26openvas34debiancve1httpd1cvelist1debian4cve1ubuntucve1osv2centos1ubuntu1suse1redhat1