PRIOn knowledge basePRION:CVE-2007-6421Cross site scripting
Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| http_server | eq | 2.2 | |
| http_server | eq | 2.2.2 | |
| http_server | eq | 2.2.4 | |
| http_server | eq | 2.2.6 | |
| http_server | eq | 2.2.3 | |
| http_server | eq | 2.2.1 |
References
docs.info.apple.com/article.html?artnum=307562
httpd.apache.org/security/vulnerabilities_22.html
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html
secunia.com/advisories/28526
secunia.com/advisories/28749
secunia.com/advisories/28977
secunia.com/advisories/29420
secunia.com/advisories/29640
securityreason.com/securityalert/3523
www.mandriva.com/security/advisories?name=MDVSA-2008:016
www.redhat.com/support/errata/RHSA-2008-0008.html
www.redhat.com/support/errata/RHSA-2008-0009.html
www.securityfocus.com/archive/1/486169/100/0/threaded
www.securityfocus.com/bid/27236
www.ubuntu.com/usn/usn-575-1
www.vupen.com/english/advisories/2008/0048
www.vupen.com/english/advisories/2008/0924/references
exchange.xforce.ibmcloud.com/vulnerabilities/39474
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10664
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8651
www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html
www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html
Related
