CVE-2008-2168
13.05.2008, 21:20
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | - |
| apache | http_server | 2.0 |
| apache | http_server | 2.0.9 |
| apache | http_server | 2.0.28 |
| apache | http_server | 2.0.28:beta |
| apache | http_server | 2.0.32 |
| apache | http_server | 2.0.32:beta |
| apache | http_server | 2.0.34:beta |
| apache | http_server | 2.0.35 |
| apache | http_server | 2.0.36 |
| apache | http_server | 2.0.37 |
| apache | http_server | 2.0.38 |
| apache | http_server | 2.0.39 |
| apache | http_server | 2.0.40 |
| apache | http_server | 2.0.41 |
| apache | http_server | 2.0.42 |
| apache | http_server | 2.0.43 |
| apache | http_server | 2.0.44 |
| apache | http_server | 2.0.45 |
| apache | http_server | 2.0.46 |
| apache | http_server | 2.0.47 |
| apache | http_server | 2.0.48 |
| apache | http_server | 2.0.49 |
| apache | http_server | 2.0.50 |
| apache | http_server | 2.0.51 |
| apache | http_server | 2.0.52 |
| apache | http_server | 2.0.53 |
| apache | http_server | 2.0.54 |
| apache | http_server | 2.0.55 |
| apache | http_server | 2.0.56 |
| apache | http_server | 2.0.57 |
| apache | http_server | 2.0.58 |
| apache | http_server | 2.0.59 |
| apache | http_server | 2.0.60 |
| apache | http_server | 2.0.61 |
| apache | http_server | 2.1 |
| apache | http_server | 2.1.1 |
| apache | http_server | 2.1.2 |
| apache | http_server | 2.1.3 |
| apache | http_server | 2.1.4 |
| apache | http_server | 2.1.5 |
| apache | http_server | 2.1.6 |
| apache | http_server | 2.1.7 |
| apache | http_server | 2.1.8 |
| apache | http_server | 2.2 |
| apache | http_server | 2.2.1 |
| apache | http_server | 2.2.2 |
| apache | http_server | 2.2.3 |
| apache | http_server | 2.2.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References