Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 thro…

Exploit prediction (EPSS)

75.89% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-79 Improper Neutralization of Input During Web Page Generation

Technology feeds

Apache HTTP Server (RSS, critical only)

References

• redhat.com /support/errata/RHSA-2008-0005.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• vupen.com /english/advisories/2008/0554 · vdb-entry, x_refsource_VUPEN, x_transferred
• vupen.com /english/advisories/2008/0447/references · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/28922 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2008/0986/references · vdb-entry, x_refsource_VUPEN, x_transferred
• securityreason.com /securityalert/3541 · third-party-advisory, x_refsource_SREASON, x_transferred
• secunia.com /advisories/28749 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• slackware.com /security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
• secunia.com /advisories/29988 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• marc.info /?l=bugtraq&m=130497311408250&w=2 · vendor-advisory, x_refsource_HP, x_transferred
• vupen.com /english/advisories/2008/1623/references · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/29806 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/494428/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• redhat.com /archives/fedora-package-announce/2008-February/msg00562.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• securitytracker.com /id?1019154 · vdb-entry, x_refsource_SECTRACK, x_transferred
• secunia.com /advisories/28526 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• oracle.com /technetwork/topics/security/cpujuly2013-1899826.html · x_refsource_CONFIRM, x_transferred
• redhat.com /support/errata/RHSA-2008-0006.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10272 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• secunia.com /advisories/31142 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• fujitsu.com /global/support/software/security/products-f/interstage-200808e.html · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/0924/references · vdb-entry, x_refsource_VUPEN, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-26-233623-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• redhat.com /support/errata/RHSA-2008-0007.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• httpd.apache.org /security/vulnerabilities_20.html · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/0047 · vdb-entry, x_refsource_VUPEN, x_transferred
• us-cert.gov /cas/techalerts/TA08-150A.html · third-party-advisory, x_refsource_CERT, x_transferred
• redhat.com /support/errata/RHSA-2008-0008.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• redhat.com /archives/fedora-package-announce/2008-February/msg00541.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• redhat.com /support/errata/RHSA-2008-0009.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:014 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/29420 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/29504 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• httpd.apache.org /security/vulnerabilities_22.html · x_refsource_CONFIRM, x_transferred
• securityfocus.com /archive/1/488082/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
• lists.apple.com /archives/security-announce/2008/Mar/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• secunia.com /advisories/30430 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.apple.com /archives/security-announce/2008//May/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2008-032.htm · x_refsource_CONFIRM, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/39472 · vdb-entry, x_refsource_XF, x_transferred
• docs.info.apple.com /article.html?artnum=307562 · Third Party Advisory, VDB Entry
• httpd.apache.org /security/vulnerabilities_13.html · Third Party Advisory, VDB Entry
• lists.opensuse.org /opensuse-security-announce/2008-04/msg00004.html · Third Party Advisory
• lists.vmware.com /pipermail/security-announce/2009/000062.html · Third Party Advisory
• secunia.com /advisories/28467 · Third Party Advisory, VDB Entry
• secunia.com /advisories/28471 · Third Party Advisory, VDB Entry
• secunia.com /advisories/28607 · URL Repurposed
• secunia.com /advisories/28965 · URL Repurposed
• secunia.com /advisories/28977 · URL Repurposed
• secunia.com /advisories/29640 · URL Repurposed
• secunia.com /advisories/30356 · URL Repurposed
• secunia.com /advisories/30732 · URL Repurposed
• secunia.com /advisories/32800 · URL Repurposed
• secunia.com /advisories/33200 · URL Repurposed
• support.nortel.com /go/main.jsp?cscat=BLTNDETAIL&id=689039 · Broken Link
• www-1.ibm.com /support/docview.wss?uid=swg1PK62966 · Broken Link
• www-1.ibm.com /support/docview.wss?uid=swg1PK63273 · Broken Link
• www-1.ibm.com /support/docview.wss?uid=swg24019245 · Broken Link
• www-1.ibm.com /support/search.wss?rs=0&q=PK59667&apar=only · Broken Link

Sources

• CVE List: CVE-2007-6388
• NVD: CVE-2007-6388

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.