NVD

Id
58206  
Name
CVE-2007-6203  
Description
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-03  
Modified Date
2011-07-18  
Seq
2007-6203  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298341 58206 CVE-2007-6203 http://docs.info.apple.com/article.html?artnum=307562  View
298342 58206 CVE-2007-6203 APPLE-SA-2008-03-18  View
298343 58206 CVE-2007-6203 SUSE-SA:2008:021  View
298344 58206 CVE-2007-6203 HPSBUX02465  View
298345 58206 CVE-2007-6203 HPSBUX02612  View
298346 58206 CVE-2007-6203 oval:org.mitre.oval:def:12166  View
298347 58206 CVE-2007-6203 http://procheckup.com/Vulnerability_PR07-37.php  View
298348 58206 CVE-2007-6203 GLSA-200803-19  View
298349 58206 CVE-2007-6203 3411  View
298350 58206 CVE-2007-6203 PK57952  View
298351 58206 CVE-2007-6203 PK65782  View
298352 58206 CVE-2007-6203 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html  View
298353 58206 CVE-2007-6203 20071130 PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method  View
298354 58206 CVE-2007-6203 26663  View
298355 58206 CVE-2007-6203 1019030  View
298356 58206 CVE-2007-6203 USN-731-1  View
298357 58206 CVE-2007-6203 ADV-2007-4060  View
298358 58206 CVE-2007-6203 ADV-2007-4301  View
298359 58206 CVE-2007-6203 ADV-2008-0924  View
298360 58206 CVE-2007-6203 ADV-2008-1623  View
298361 58206 CVE-2007-6203 ADV-2008-1875  View
298362 58206 CVE-2007-6203 apache-413error-xss(38800)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52327 JVNDB-2007-001017 Apache HTTP Server の 413 エラーメッセージにおける HTTP メソッドを適切に検査しない問題 Apache HTTP Server は、413 エラーページを返す際、HTTP リクエストからの HTTP メソッドを適切に検査しない問題があります。 CVE-2007-6203 29558 CVE-2007-6203 58206 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001017.html 2007-12-03 2010-12-20 View