PT-2000-1990 · Apache · Apache+1

Published 2000-02-01 · Updated 2021-06-06 · CVE-2000-1205

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache versions 1.3.0 through 1.3.11

Description The issue allows remote attackers to execute scripts as other web site visitors. This can occur via the printenv CGI, which does not encode its output, pages generated by the ap send error response function, or various messages generated by Apache modules or core code. Attackers can embed malicious HTML tags in client web requests if the server or script handling the request does not carefully encode all information displayed to the user. This could allow attackers to obtain copies of private cookies used to authenticate users to other sites.

Recommendations For Apache versions 1.3.0 through 1.3.11, consider disabling the printenv CGI or ensuring that its output is properly encoded to prevent cross-site scripting attacks. Additionally, restrict access to default error pages generated by the ap send error response function and ensure that all information displayed to users is carefully encoded. As a temporary workaround, consider restricting the use of certain Apache modules or core code that generate vulnerable messages until a patch is available.

Fix

RCE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2000-1205

Affected Products

Apache

Apache Http Server

References · 14

• http://httpd.apache.org/info/css-security/apache_specific.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1205 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-12/0233.html · Note
• http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10938 · Note
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35597 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1205 · Note
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E · Note
• https://httpd.apache.org/security/vulnerabilities_13.html#CVE-2000-1205 · Note
• http://marc.info/?l=bugtraq&m=118529436424127&w=2 · Note
• https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E · Note