NVD

Id
64327  
Name
CVE-2006-5752  
Description
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-06-27  
Modified Date
2013-07-17  
Seq
2006-5752  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335609 64327 CVE-2006-5752 http://bugs.gentoo.org/show_bug.cgi?id=186219  View
335610 64327 CVE-2006-5752 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245112  View
335611 64327 CVE-2006-5752 HPSBUX02262  View
335612 64327 CVE-2006-5752 http://httpd.apache.org/security/vulnerabilities_13.html  View
335613 64327 CVE-2006-5752 http://httpd.apache.org/security/vulnerabilities_20.html  View
335614 64327 CVE-2006-5752 http://httpd.apache.org/security/vulnerabilities_22.html  View
335615 64327 CVE-2006-5752 [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server  View
335616 64327 CVE-2006-5752 oval:org.mitre.oval:def:10154  View
335617 64327 CVE-2006-5752 RHSA-2007:0534  View
335618 64327 CVE-2006-5752 RHSA-2007:0556  View
335619 64327 CVE-2006-5752 GLSA-200711-06  View
335620 64327 CVE-2006-5752 103179  View
335621 64327 CVE-2006-5752 200032  View
335622 64327 CVE-2006-5752 http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm  View
335623 64327 CVE-2006-5752 http://svn.apache.org/viewvc?view=rev&revision=549159  View
335624 64327 CVE-2006-5752 PK52702  View
335625 64327 CVE-2006-5752 PK49295  View
335626 64327 CVE-2006-5752 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html  View
335627 64327 CVE-2006-5752 MDKSA-2007:140  View
335628 64327 CVE-2006-5752 MDKSA-2007:141  View
335629 64327 CVE-2006-5752 MDKSA-2007:142  View
335630 64327 CVE-2006-5752 SUSE-SA:2007:061  View
335631 64327 CVE-2006-5752 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
335632 64327 CVE-2006-5752 FEDORA-2007-2214  View
335633 64327 CVE-2006-5752 RHSA-2007:0532  View
335634 64327 CVE-2006-5752 RHSA-2007:0557  View
335635 64327 CVE-2006-5752 RHSA-2008:0261  View
335636 64327 CVE-2006-5752 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server  View
335637 64327 CVE-2006-5752 24645  View
335638 64327 CVE-2006-5752 1018302  View
335639 64327 CVE-2006-5752 2007-0026  View
335640 64327 CVE-2006-5752 USN-499-1  View
335641 64327 CVE-2006-5752 ADV-2007-2727  View
335642 64327 CVE-2006-5752 ADV-2007-3283  View
335643 64327 CVE-2006-5752 ADV-2007-3386  View
335644 64327 CVE-2006-5752 ADV-2007-4305  View
335645 64327 CVE-2006-5752 ADV-2008-0233  View
335646 64327 CVE-2006-5752 apache-modstatus-xss(35097)  View
335647 64327 CVE-2006-5752 https://issues.rpath.com/browse/RPL-1500  View
335648 64327 CVE-2006-5752 RHSA-2007:0533  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51815 JVNDB-2007-000478 Apache HTTP Server の mod_status モジュールにおけるクロスサイトスクリプティングの脆弱性 Apache HTTP Server の mod_status モジュールにはブラウザの文字コード処理に不備が存在するために ExtendedStatus を有効にしている場合、server-status ページ上でクロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5752 21854 CVE-2006-5752 64327 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000478.html 2007-06-26 2014-05-21 View