NVD

Id
433  
Name
CVE-2008-0455  
Description
Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-01-24  
Modified Date
2013-02-06  
Seq
2008-0455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2958 433 CVE-2008-0455 RHSA-2012:1591  View
2959 433 CVE-2008-0455 RHSA-2012:1592  View
2960 433 CVE-2008-0455 RHSA-2012:1594  View
2961 433 CVE-2008-0455 RHSA-2013:0130  View
2962 433 CVE-2008-0455 GLSA-200803-19  View
2963 433 CVE-2008-0455 3575  View
2964 433 CVE-2008-0455 1019256  View
2965 433 CVE-2008-0455 http://www.mindedsecurity.com/MSA01150108.html  View
2966 433 CVE-2008-0455 20080122 Apache mod_negotiation Xss and Http Response Splitting  View
2967 433 CVE-2008-0455 27409  View
2968 433 CVE-2008-0455 apache-modnegotiation-xss(39867)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47348 JVNDB-2008-002658 Apache HTTP Server の mod_negotiation モジュールにおけるクロスサイトスクリプティングの脆弱性 Apache HTTP Server の mod_negotiation モジュールは、拡張子がリクエスト内で省略されている際に、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0455 30568 CVE-2008-0455 433 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002658.html 2008-01-24 2013-01-15 View