CVE-2008-0005
Description
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
Risk Information
Base Score
6.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
2.65
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Apache to version 2.2.6 | Windows |
| Update Apache to version 2.0.63 | Windows |
| Vulnerabilities CVE-2008-0005 are fixed in Apache 2.2.8 | Windows |
| Vulnerabilities CVE-2008-0005 are fixed in Apache 2.0.63 | Windows |
| Update Apache to version 2.2.6 (For Linux) | Linux |
| Update Apache to version 2.0.63 (For Linux) | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234