Description
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-499-1 | Apache vulnerabilities |
References
History
No history.
Subscriptions
Apache
Subscribe
Http Server
Subscribe
Canonical
Subscribe
Ubuntu Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Redhat
Subscribe
Certificate System
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Workstation
Subscribe
Network Proxy
Subscribe
Network Satellite
Subscribe
Rhel Application Stack
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T20:04:54.716Z
Reserved: 2006-11-06T00:00:00.000Z
Link: CVE-2006-5752
No data.
Status : Deferred
Published: 2007-06-27T17:30:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2006-5752
OpenCVE Enrichment
No data.
Weaknesses
Ubuntu USN