NVD

Id
2833  
Name
CVE-2008-2939  
Description
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-06  
Modified Date
2016-05-27  
Seq
2008-2939  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17975 2833 CVE-2008-2939 APPLE-SA-2009-05-12  View
17976 2833 CVE-2008-2939 SUSE-SR:2008:024  View
17977 2833 CVE-2008-2939 HPSBUX02401  View
17978 2833 CVE-2008-2939 HPSBUX02465  View
17979 2833 CVE-2008-2939 oval:org.mitre.oval:def:11316  View
17980 2833 CVE-2008-2939 oval:org.mitre.oval:def:7716  View
17981 2833 CVE-2008-2939 RHSA-2008:0967  View
17982 2833 CVE-2008-2939 247666  View
17983 2833 CVE-2008-2939 http://support.apple.com/kb/HT3549  View
17984 2833 CVE-2008-2939 http://svn.apache.org/viewvc?view=rev&revision=682868  View
17985 2833 CVE-2008-2939 http://svn.apache.org/viewvc?view=rev&revision=682870  View
17986 2833 CVE-2008-2939 http://svn.apache.org/viewvc?view=rev&revision=682871  View
17987 2833 CVE-2008-2939 http://wiki.rpath.com/Advisories:rPSA-2008-0327  View
17988 2833 CVE-2008-2939 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328  View
17989 2833 CVE-2008-2939 PK70197  View
17990 2833 CVE-2008-2939 PK70937  View
17991 2833 CVE-2008-2939 VU#663763  View
17992 2833 CVE-2008-2939 MDVSA-2008:194  View
17993 2833 CVE-2008-2939 MDVSA-2008:195  View
17994 2833 CVE-2008-2939 MDVSA-2009:124  View
17995 2833 CVE-2008-2939 http://www.rapid7.com/advisories/R7-0033  View
17996 2833 CVE-2008-2939 RHSA-2008:0966  View
17997 2833 CVE-2008-2939 20080806 Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting  View
17998 2833 CVE-2008-2939 20081122 rPSA-2008-0327-1 httpd mod_ssl  View
17999 2833 CVE-2008-2939 20081122 rPSA-2008-0328-1 httpd mod_ssl  View
18000 2833 CVE-2008-2939 30560  View
18001 2833 CVE-2008-2939 1020635  View
18002 2833 CVE-2008-2939 USN-731-1  View
18003 2833 CVE-2008-2939 TA09-133A  View
18004 2833 CVE-2008-2939 ADV-2008-2315  View
18005 2833 CVE-2008-2939 ADV-2008-2461  View
18006 2833 CVE-2008-2939 ADV-2009-0320  View
18007 2833 CVE-2008-2939 ADV-2009-1297  View
18008 2833 CVE-2008-2939 apache-modproxyftp-xss(44223)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46300 JVNDB-2008-001610 Apache の mod_proxy_ftp モジュールにおけるクロスサイトスクリプティングの脆弱性 Apache の mod_proxy_ftp モジュールには、proxy_ftp.c および mod_proxy_ftp.c において、FTP URI パス名のワイルドカードの取り扱いに不備があり、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2939 33052 CVE-2008-2939 2833 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001610.html 2008-08-06 2010-11-04 View