Title: Apache mod_imagemap and mod_imap Cross-Site Scripting Vulnerability
Severity: MODERATE
Description:
Apache is an HTTP webserver available for multiple operating platforms.
The application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to unspecified parameters.
This issue occurs only when 'mod_imagemap' or 'mod_imap' is enabled and an imagemap file is publicly available.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
This issue affects the following:
- The 'mod_imagemap' module in Apache 2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, and 2.2.0
- The 'mod_imap' module in Apache 1.3.39, 1.3.37, 1.3.36, 1.3.35, 1.3.34, 1.3.33, 1.3.32, 1.3.31, 1.3.29, 1.3.28, 1.3.27, 1.3.26, 1.3.24, 1.3.22, 1.3.20, 1.3.19, 1.3.17, 1.3.14, 1.3.12, 1.3.11, 1.3.9, 1.3.6, 1.3.4, 1.3.3, 1.3.2, 1.3.1, and 1.3.0.
Affected Products:
- Apache Software Foundation Apache 1.3.0
- Apache Software Foundation Apache 1.3.1
- Apache Software Foundation Apache 1.3.11
- Apache Software Foundation Apache 1.3.12
- Apache Software Foundation Apache 1.3.14
- Apache Software Foundation Apache 1.3.17
- Apache Software Foundation Apache 1.3.19
- Apache Software Foundation Apache 1.3.20
- Apache Software Foundation Apache 1.3.22
- Apache Software Foundation Apache 1.3.24
- Apache Software Foundation Apache 1.3.26
- Apache Software Foundation Apache 1.3.27
- Apache Software Foundation Apache 1.3.28
- Apache Software Foundation Apache 1.3.29
- Apache Software Foundation Apache 1.3.3
- Apache Software Foundation Apache 1.3.31
- Apache Software Foundation Apache 1.3.32
- Apache Software Foundation Apache 1.3.33
- Apache Software Foundation Apache 1.3.34
- Apache Software Foundation Apache 1.3.35
- Apache Software Foundation Apache 1.3.36
- Apache Software Foundation Apache 1.3.37
- Apache Software Foundation Apache 1.3.39
- Apache Software Foundation Apache 1.3.4
- Apache Software Foundation Apache 1.3.6
- Apache Software Foundation Apache 1.3.9
- Apache Software Foundation Apache 2.0.0
- Apache Software Foundation Apache 2.0.0 a9
- Apache Software Foundation Apache 2.0.28
- Apache Software Foundation Apache 2.0.28 Beta
- Apache Software Foundation Apache 2.0.32
- Apache Software Foundation Apache 2.0.35
- Apache Software Foundation Apache 2.0.36
- Apache Software Foundation Apache 2.0.37
- Apache Software Foundation Apache 2.0.38
- Apache Software Foundation Apache 2.0.39
- Apache Software Foundation Apache 2.0.40
- Apache Software Foundation Apache 2.0.41
- Apache Software Foundation Apache 2.0.42
- Apache Software Foundation Apache 2.0.43
- Apache Software Foundation Apache 2.0.44
- Apache Software Foundation Apache 2.0.45
- Apache Software Foundation Apache 2.0.46
- Apache Software Foundation Apache 2.0.47
- Apache Software Foundation Apache 2.0.48
- Apache Software Foundation Apache 2.0.49
- Apache Software Foundation Apache 2.0.50
- Apache Software Foundation Apache 2.0.51
- Apache Software Foundation Apache 2.0.52
- Apache Software Foundation Apache 2.0.53
- Apache Software Foundation Apache 2.0.54
- Apache Software Foundation Apache 2.0.55
- Apache Software Foundation Apache 2.0.56 -dev
- Apache Software Foundation Apache 2.0.58
- Apache Software Foundation Apache 2.0.59
- Apache Software Foundation Apache 2.0.60-dev
- Apache Software Foundation Apache 2.0.61-dev
- Apache Software Foundation Apache 2.2.0 .0
- Apache Software Foundation Apache 2.2.2
- Apache Software Foundation Apache 2.2.3
- Apache Software Foundation Apache 2.2.4
- Apache Software Foundation Apache 2.2.5
- Apache Software Foundation Apache 2.2.6
- Apple Mac OS X 10.1.0
- Apple Mac OS X 10.1.1
- Apple Mac OS X 10.1.2
- Apple Mac OS X 10.1.3
- Apple Mac OS X 10.1.4
- Apple Mac OS X 10.1.5
- Apple Mac OS X 10.2.0
- Apple Mac OS X 10.2.1
- Apple Mac OS X 10.2.2
- Apple Mac OS X 10.2.3
- Apple Mac OS X 10.2.4
- Apple Mac OS X 10.2.5
- Apple Mac OS X 10.2.6
- Apple Mac OS X 10.2.7
- Apple Mac OS X 10.2.8
- Apple Mac OS X 10.3.0
- Apple Mac OS X 10.3.1
- Apple Mac OS X 10.3.2
- Apple Mac OS X 10.3.3
- Apple Mac OS X 10.3.4
- Apple Mac OS X 10.3.5
- Apple Mac OS X 10.3.6
- Apple Mac OS X 10.4.10
- Apple Mac OS X 10.4.11
- Apple Mac OS X 10.4.2
- Apple Mac OS X 10.4.3
- Apple Mac OS X 10.4.4
- Apple Mac OS X 10.4.5
- Apple Mac OS X 10.4.6
- Apple Mac OS X 10.4.7
- Apple Mac OS X 10.4.8
- Apple Mac OS X 10.4.9
- Apple Mac OS X Server 10.1.0
- Apple Mac OS X Server 10.1.1
- Apple Mac OS X Server 10.1.2
- Apple Mac OS X Server 10.1.3
- Apple Mac OS X Server 10.1.4
- Apple Mac OS X Server 10.1.5
- Apple Mac OS X Server 10.2.0
- Apple Mac OS X Server 10.2.1
- Apple Mac OS X Server 10.2.2
- Apple Mac OS X Server 10.2.3
- Apple Mac OS X Server 10.2.4
- Apple Mac OS X Server 10.2.5
- Apple Mac OS X Server 10.2.6
- Apple Mac OS X Server 10.2.7
- Apple Mac OS X Server 10.2.8
- Apple Mac OS X Server 10.3.0
- Apple Mac OS X Server 10.3.1
- Apple Mac OS X Server 10.3.2
- Apple Mac OS X Server 10.3.3
- Apple Mac OS X Server 10.3.4
- Apple Mac OS X Server 10.3.5
- Apple Mac OS X Server 10.3.6
- Apple Mac OS X Server 10.4.1
- Apple Mac OS X Server 10.4.10
- Apple Mac OS X Server 10.4.11
- Apple Mac OS X Server 10.4.2
- Apple Mac OS X Server 10.4.3
- Apple Mac OS X Server 10.4.4
- Apple Mac OS X Server 10.4.5
- Apple Mac OS X Server 10.4.6
- Apple Mac OS X Server 10.4.7
- Apple Mac OS X Server 10.4.8
- Apple Mac OS X Server 10.4.9
- Apple Mac OS X Server 10.5
- Apple Mac OS X Server 10.5.1
- Apple Mac OS X Server 10.5.2
- Avaya AES 3.1
- Avaya AES 3.1.3
- Avaya AES 3.1.4
- Avaya AES 4.0
- Avaya AES 4.0.1
- Avaya CCS 3.1
- Avaya CCS 3.1.1
- Avaya CCS 3.1.2
- Avaya CCS 4.0
- Avaya Communication Manager 3.0
- Avaya Communication Manager 3.1
- Avaya Communication Manager 4.0
- Avaya Communication Manager 5.0
- Avaya Communication Manager Server DEFINITY Server SI/CS
- Avaya Communication Manager Server S8100
- Avaya Communication Manager Server S8300
- Avaya Communication Manager Server S8500
- Avaya Communication Manager Server S8700
- Avaya Intuity AUDIX LX 2.0
- Avaya Meeting Exchange 5.0
- Avaya Message Networking 3.1
- Avaya Message Networking MN 3.1
- Avaya Messaging Storage Server 3.1
- Avaya Messaging Storage Server MM3.0
- Avaya Messaging Storage Server MSS 3.0
- Avaya SES 3.1.1
- Avaya SES 3.1.2
- Avaya SES 4.0
- Avaya Voice Portal 4.0
- Avaya Voice Portal 4.1
- BSDI BSD/OS 4.0.0
- Caldera OpenLinux Server 3.1.0
- Caldera OpenLinux Server 3.1.1
- Caldera OpenLinux Workstation 3.1.0
- Caldera OpenLinux Workstation 3.1.1
- Conectiva Linux 6.0.0
- Conectiva Linux 7.0.0
- Conectiva Linux 8.0.0
- Conectiva Linux 9.0.0
- Debian Linux 2.2.0
- Debian Linux 2.2.0 68k
- Debian Linux 2.2.0 alpha
- Debian Linux 2.2.0 arm
- Debian Linux 2.2.0 powerpc
- Debian Linux 2.2.0 sparc
- Debian Linux 2.3.0
- Debian Linux 3.0.0 alpha
- Debian Linux 3.0.0 arm
- Debian Linux 3.0.0 hppa
- Debian Linux 3.0.0 ia-32
- Debian Linux 3.0.0 ia-64
- Debian Linux 3.0.0 m68k
- Debian Linux 3.0.0 mips
- Debian Linux 3.0.0 mipsel
- Debian Linux 3.0.0 ppc
- Debian Linux 3.0.0 s/390
- Debian Linux 3.0.0 sparc
- Debian Linux 3.1.0
- Debian Linux 3.1.0 alpha
- Debian Linux 3.1.0 amd64
- Debian Linux 3.1.0 arm
- Debian Linux 3.1.0 hppa
- Debian Linux 3.1.0 ia-32
- Debian Linux 3.1.0 ia-64
- Debian Linux 3.1.0 m68k
- Debian Linux 3.1.0 mips
- Debian Linux 3.1.0 mipsel
- Debian Linux 3.1.0 ppc
- Debian Linux 3.1.0 s/390
- Debian Linux 3.1.0 sparc
- EnGarde Secure Linux 1.0.1
- Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0
- Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0.1
- Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0
- Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0
- Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1
- Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.0
- Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.1
- Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.2
- Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.0
- Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.0A
- Fujitsu INTERSTAGE Application Server Plus Developer 5.0.1
- Fujitsu INTERSTAGE Application Server Plus Developer 6.0
- Fujitsu INTERSTAGE Application Server Plus Developer 7.0
- Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.0
- Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.1
- Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.2
- Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.2
- Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.0
- Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.0A
- Fujitsu INTERSTAGE Apworks Enterprise Edition 8.0.0
- Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0
- Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0A
- Fujitsu INTERSTAGE Apworks Modelers-J Edition 7.0
- Fujitsu INTERSTAGE Apworks Standard-J Edition 8.0.0
- Fujitsu INTERSTAGE Business Application Server Enterprise 8.0.0
- Fujitsu INTERSTAGE Job Workload Server 8.1.0
- Fujitsu INTERSTAGE Studio Enterprise Edition 8.0.1
- Fujitsu INTERSTAGE Studio Enterprise Edition 9.0.0
- Fujitsu INTERSTAGE Studio Standard-J Edition 8.0.1
- Fujitsu INTERSTAGE Studio Standard-J Edition 9.0.0
- Fujitsu Interstage Application Server Plus 5.0.1
- Fujitsu Interstage Application Server Plus 6.0
- Fujitsu Interstage Application Server Plus 7.0
- Fujitsu Interstage Application Server Plus 7.0.1
- Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0
- Gentoo Linux
- Gentoo Linux 1.2.0
- Gentoo Linux 1.4.0
- Gentoo Linux 1.4.0 _rc1
- HP HP-UX (VVOS) 11.0.0 4
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- HP HP-UX B.11.31
- HP OpenView Network Node Manager 7.01
- HP OpenView Network Node Manager 7.51
- HP OpenView Network Node Manager 7.53
- HP Secure OS software for Linux 1.0.0
- HP VirtualVault 4.5.0
- HP VirtualVault 4.6.0
- HP Webproxy 2.0.0
- IBM HTTP Server 1.3.28 .1
- IBM HTTP Server 2.0.42
- IBM HTTP Server 2.0.42 .1
- IBM HTTP Server 2.0.42 .2
- IBM HTTP Server 2.0.47
- IBM HTTP Server 2.0.47 .1
- IBM HTTP Server 6.0.2.12
- IBM HTTP Server 6.0.2.12
- IBM HTTP Server 6.0.2.13
- IBM HTTP Server 6.0.2.19
- IBM HTTP Server 6.0.2.23
- IBM HTTP Server 6.0.2.27
- IBM HTTP Server 6.1.0
- IBM HTTP Server 6.1.0.1
- IBM HTTP Server 6.1.0.13
- IBM HTTP Server 6.1.0.15
- IBM Hardware Management Console (HMC) for iSeries 6.0 R1.3
- IBM Hardware Management Console (HMC) for pSeries 6.0 R1.3
- Immunix Immunix OS 7+
- Linux kernel 2.6.5
- MandrakeSoft Corporate Server 1.0.1
- MandrakeSoft Corporate Server 2.1.0
- MandrakeSoft Corporate Server 2.1.0 x86_64
- MandrakeSoft Corporate Server 3.0.0
- MandrakeSoft Corporate Server 3.0.0 x86_64
- MandrakeSoft Corporate Server 4.0
- MandrakeSoft Corporate Server 4.0.0 x86_64
- MandrakeSoft Linux Mandrake 10.0.0
- MandrakeSoft Linux Mandrake 10.0.0 amd64
- MandrakeSoft Linux Mandrake 10.1.0
- MandrakeSoft Linux Mandrake 10.1.0 x86_64
- MandrakeSoft Linux Mandrake 2007.0
- MandrakeSoft Linux Mandrake 2007.0 x86_64
- MandrakeSoft Linux Mandrake 2007.1
- MandrakeSoft Linux Mandrake 2007.1 x86_64
- MandrakeSoft Linux Mandrake 2008.0
- MandrakeSoft Linux Mandrake 2008.0 x86_64
- MandrakeSoft Linux Mandrake 7.1.0
- MandrakeSoft Linux Mandrake 7.2.0
- MandrakeSoft Linux Mandrake 8.0.0
- MandrakeSoft Linux Mandrake 8.0.0 ppc
- MandrakeSoft Linux Mandrake 8.1.0
- MandrakeSoft Linux Mandrake 8.1.0 ia64
- MandrakeSoft Linux Mandrake 9.0.0
- MandrakeSoft Linux Mandrake 9.1.0
- MandrakeSoft Linux Mandrake 9.1.0 ppc
- MandrakeSoft Linux Mandrake 9.2.0
- MandrakeSoft Linux Mandrake 9.2.0 amd64
- MandrakeSoft Multi Network Firewall 2.0.0
- MandrakeSoft Single Network Firewall 7.2.0
- Netscreen NetScreen-Global PRO Express Policy Manager Server
- Netscreen NetScreen-Global PRO Policy Manager Server
- OpenBSD OpenBSD 2.8.0
- OpenBSD OpenBSD 2.9.0
- OpenBSD OpenBSD 3.0
- OpenBSD OpenBSD 3.1
- OpenBSD OpenBSD 3.3
- OpenBSD OpenBSD 3.4
- OpenPKG OpenPKG 1.0.0
- OpenPKG OpenPKG 1.1.0
- OpenPKG OpenPKG 1.3.0
- OpenPKG OpenPKG 2.0.0
- OpenPKG OpenPKG Current
- Oracle Oracle HTTP Server 9.0.1
- Oracle Oracle HTTP Server 9.2.0 .0
- Oracle Oracle9i Application Server 1.0.2
- Oracle Oracle9i Application Server 1.0.2 .1s
- Oracle Oracle9i Application Server 1.0.2 .2
- Oracle Oracle9i Application Server 9.0.2
- RedHat Advanced Workstation for the Itanium Processor 2.1.0
- RedHat Advanced Workstation for the Itanium Processor 2.1.0 IA64
- RedHat Application Stack v1 for Enterprise Linux AS 4
- RedHat Application Stack v1 for Enterprise Linux ES 4
- RedHat Desktop 3.0.0
- RedHat Desktop 4.0.0
- RedHat Enterprise Linux 5 server
- RedHat Enterprise Linux AS 2.1
- RedHat Enterprise Linux AS 2.1 IA64
- RedHat Enterprise Linux AS 3
- RedHat Enterprise Linux AS 4
- RedHat Enterprise Linux Desktop 5 client
- RedHat Enterprise Linux Desktop Workstation 5 client
- RedHat Enterprise Linux ES 2.1
- RedHat Enterprise Linux ES 2.1 IA64
- RedHat Enterprise Linux ES 3
- RedHat Enterprise Linux ES 4
- RedHat Enterprise Linux WS 2.1
- RedHat Enterprise Linux WS 2.1 IA64
- RedHat Enterprise Linux WS 3
- RedHat Enterprise Linux WS 4
- RedHat Fedora 7
- RedHat Fedora 8
- RedHat Fedora Core1
- RedHat Fedora Core2
- RedHat Linux 5.2.0 alpha
- RedHat Linux 5.2.0 i386
- RedHat Linux 5.2.0 sparc
- RedHat Linux 6.2.0 alpha
- RedHat Linux 6.2.0 i386
- RedHat Linux 6.2.0 sparc
- RedHat Linux 7.0.0 alpha
- RedHat Linux 7.0.0 i386
- RedHat Linux 7.1.0 alpha
- RedHat Linux 7.1.0 i386
- RedHat Linux 7.1.0 ia64
- RedHat Linux 7.2.0 i386
- RedHat Linux 7.2.0 ia64
- RedHat Linux 8.0.0
- RedHat Linux 9.0.0 i386
- RedHat Linux Advanced Work Station 2.1.0
- RedHat Network Proxy (for RHEL 4) 5.0
- RedHat Red Hat Network Satellite Server 5.0.0
- S.u.S.E. Linux 10.1 ppc
- S.u.S.E. Linux 10.1 x86
- S.u.S.E. Linux 10.1 x86-64
- S.u.S.E. Linux 6.4.0
- S.u.S.E. Linux 6.4.0 alpha
- S.u.S.E. Linux 6.4.0 i386
- S.u.S.E. Linux 6.4.0 ppc
- S.u.S.E. Linux 7.0.0
- S.u.S.E. Linux 7.0.0 alpha
- S.u.S.E. Linux 7.0.0 i386
- S.u.S.E. Linux 7.0.0 ppc
- S.u.S.E. Linux 7.0.0 sparc
- S.u.S.E. Linux 7.1.0
- S.u.S.E. Linux 7.1.0 alpha
- S.u.S.E. Linux 7.1.0 ppc
- S.u.S.E. Linux 7.1.0 sparc
- S.u.S.E. Linux 7.1.0 x86
- S.u.S.E. Linux 7.2.0
- S.u.S.E. Linux 7.2.0 i386
- S.u.S.E. Linux 7.3.0
- S.u.S.E. Linux 7.3.0 i386
- S.u.S.E. Linux 7.3.0 ppc
- S.u.S.E. Linux 7.3.0 sparc
- S.u.S.E. Linux 8.1.0
- S.u.S.E. Linux Enterprise Server 10.SP1
- S.u.S.E. Linux Enterprise Server 9
- S.u.S.E. Linux Personal 8.2.0
- S.u.S.E. Linux Personal 9.0.0
- S.u.S.E. Linux Personal 9.0.0 x86_64
- S.u.S.E. Linux Personal 9.1.0
- S.u.S.E. Novell Linux Desktop 9
- S.u.S.E. Novell Linux Desktop SDK 9.0.0
- S.u.S.E. Novell Linux POS 9
- S.u.S.E. Open-Enterprise-Server
- S.u.S.E. SLE SDK 10.SP1
- S.u.S.E. SUSE Linux Enterprise Server 10 SP1
- S.u.S.E. openSUSE 10.2
- S.u.S.E. openSUSE 10.3
- SGI IRIX 6.5.0
- SGI IRIX 6.5.1
- SGI IRIX 6.5.10
- SGI IRIX 6.5.11
- SGI IRIX 6.5.12
- SGI IRIX 6.5.12 f
- SGI IRIX 6.5.12 m
- SGI IRIX 6.5.13
- SGI IRIX 6.5.13 f
- SGI IRIX 6.5.13 m
- SGI IRIX 6.5.14
- SGI IRIX 6.5.14 f
- SGI IRIX 6.5.14 m
- SGI IRIX 6.5.15
- SGI IRIX 6.5.16
- SGI IRIX 6.5.17
- SGI IRIX 6.5.18
- SGI IRIX 6.5.19
- SGI IRIX 6.5.2
- SGI IRIX 6.5.3
- SGI IRIX 6.5.4
- SGI IRIX 6.5.5
- SGI IRIX 6.5.6
- SGI IRIX 6.5.7
- SGI IRIX 6.5.8
- SGI IRIX 6.5.9
- Slackware Linux -current
- Slackware Linux 10.0.0
- Slackware Linux 10.1.0
- Slackware Linux 10.2.0
- Slackware Linux 11.0
- Slackware Linux 12.0
- Slackware Linux 12.1
- Slackware Linux 8.0.0
- Slackware Linux 8.1.0
- Slackware Linux 9.0.0
- Slackware Linux 9.1.0
- Sun Cobalt Control Station 4100CS
- Sun Cobalt ManageRaQ v2 3599BD
- Sun Cobalt ManageRaQ3 3000R-mr
- Sun Cobalt Qube3 4000WG
- Sun Cobalt RaQ 550
- Sun Cobalt RaQ XTR 3500R
- Sun Cobalt RaQ3 3000R
- Sun Cobalt RaQ4 3001R
- Sun Cobalt Velociraptor
- Sun Solaris 10
- Sun Solaris 10_x86
- Sun Solaris 8
- Sun Solaris 8_x86
- Sun Solaris 9
- Sun Solaris 9_x86
- Sun Solaris 9_x86 Update 2
- Sun SunOS 5.8.0
- Sun SunOS 5.8.0 _x86
- Sun SunOS 5.9.0
- Sun SunOS 5.9.0 _x86
- Terra Soft Solutions Yellow Dog Linux 3.0.0
- Trustix Secure Linux 1.1.0
- Trustix Secure Linux 1.2.0
- Trustix Secure Linux 1.5.0
- Trustix Secure Linux 2.0.0
- Trustix Secure Linux 2.1.0
- Turbolinux Appliance Server 1.0.0 Hosting Edition
- Turbolinux Appliance Server 1.0.0 Workgroup Edition
- Turbolinux Appliance Server 2.0
- Turbolinux Appliance Server Hosting Edition 1.0.0
- Turbolinux Appliance Server Workgroup Edition 1.0.0
- Turbolinux FUJI
- Turbolinux Multimedia
- Turbolinux Personal
- Turbolinux Turbolinux FUJI
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 10.0.0 x64
- Turbolinux Turbolinux Server 11
- Turbolinux Turbolinux Server 11 x64
- Turbolinux Turbolinux Server 8.0.0
- Ubuntu Ubuntu Linux 6.06 LTS amd64
- Ubuntu Ubuntu Linux 6.06 LTS i386
- Ubuntu Ubuntu Linux 6.06 LTS powerpc
- Ubuntu Ubuntu Linux 6.06 LTS sparc
- Ubuntu Ubuntu Linux 6.10 amd64
- Ubuntu Ubuntu Linux 6.10 i386
- Ubuntu Ubuntu Linux 6.10 powerpc
- Ubuntu Ubuntu Linux 6.10 sparc
- Ubuntu Ubuntu Linux 7.04 amd64
- Ubuntu Ubuntu Linux 7.04 i386
- Ubuntu Ubuntu Linux 7.04 powerpc
- Ubuntu Ubuntu Linux 7.04 sparc
- Ubuntu Ubuntu Linux 7.10 amd64
- Ubuntu Ubuntu Linux 7.10 i386
- Ubuntu Ubuntu Linux 7.10 powerpc
- Ubuntu Ubuntu Linux 7.10 sparc
- Unisphere Networks SDX-300 2.0.3
- Yellow Dog Linux Yellow Dog Linux 3.0.0
- rPath Appliance Platform Linux Service 1
- rPath rPath Linux 1
References:
- Apache: Apache HTTP Server 1.3.41 Released
- Apache: Apache HTTP Server 2.0.63 Released
- Apache: Apache httpd 2.0 vulnerabilities
- Apache Software Foundation: Apache Homepage
- Apache Software Foundation: Apache httpd 1.3 vulnerabilities
- Apache Software Foundation: Apache httpd 2.2 vulnerabilities
- Avaya: ASA-2008-026 httpd security update (RHSA-2008-0005)
- Avaya: ASA-2008-032 httpd security update (RHSA-2008-0006)
- Avaya Inc.: ASA-2008-031 Apache security update (RHSA-2008-0004)
- CVE: CVE-2007-2500
- CVE: CVE-2007-5000
- Fujitsu: Cross Site Scripting (XSS) problem in Interstage HTTP Server(CVE-2007-5000). Jan
- HP: HPSBMA02388 SSRT080059 - HP OpenView Network Node Manager (OV NNM), Remote Cross
- HP: HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitra
- HP : HP Homepage
- IBM: PK58024: CVE-2007-2500 MOD_IMAP CROSS-SITE SCRIPTING VULNERABILITY
- IBM: PK58074: Z/OS IBM HTTP SERVER FOR WEBSPHERE (POWERED BY APACHE) FIX PACK 6.1.0.1
- IBM: PK63273: ADDRESS PROBLEMS IN IBM HTTP SERVER 1.3.28 RESOLVED AFTER PK55141.
- IBM: PK65782; 2.0.47.1: IBM HTTP Server V2.0.47 Cumulative Interim Fix
- IBM: PTF MH01110 - Security fixes for HMC V6R1.3
- Red Hat: RHSA-2008:0004-7 - apache security update
- Red Hat: RHSA-2008:0005-4 - httpd security update
- Red Hat: RHSA-2008:0006-6 - httpd security update
- Red Hat: RHSA-2008:0007-2 httpd security update
- Red Hat: RHSA-2008:0008-6 httpd security update
- Red Hat: RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update
- Red Hat: RHSA-2008:0263-2 Red Hat Network Proxy Server security update
- Red Hat: RHSA-2008:0523-1 Low: Red Hat Network Proxy Server security update
- Red Hat: RHSA-2008:0524-4 Low: Red Hat Network Satellite Server security update
- Sun: 233623: Cross Site Scripting (XSS) Vulnerabilities in the Apache 1.3 and 2.0 "mo
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
