PT-2005-4155 · Apache+2 · Apache Http Server+2

Published 2005-12-12 · Updated 2024-06-15 · CVE-2005-3352

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache httpd versions 1.3.x through 1.3.35-dev Apache httpd 2.0.x versions prior to 2.0.56-dev

Description A cross-site scripting (XSS) issue exists in the mod imap module, allowing remote attackers to inject arbitrary web script or HTML via the Referer when using image maps. This can be exploited if a victim is forced to visit a malicious URL using certain web browsers. The issue arises from a flaw in mod imap when using the Referer directive with image maps.

Recommendations For Apache httpd versions 1.3.x through 1.3.35-dev, update to version 1.3.35-dev or later. For Apache httpd 2.0.x versions prior to 2.0.56-dev, update to version 2.0.56-dev or later. As a temporary workaround, consider disabling the mod imap module until a patch is available. Restrict access to image maps to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2005-3352

DSA-1167-1

HPSBUX02164

HPSBUX02172

OPENSUSE-SU-2024:10623-1

RHSA-2006:0159

RHSA-2006_0159

RHSA-2008:0523

Affected Products

Apache Http Server

Hp-Ux

Red Hat

References · 143

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_mod_rewrite_ldap.rb · Exploit
• http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html · Vendor Advisory
• http://securityfocus.com/archive/1/425399/100/0/threaded · Vendor Advisory
• http://securityfocus.com/archive/1/450321/100/0/threaded · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0158.html · Vendor Advisory
• http://trustix.org/errata/2005/0074 · Vendor Advisory
• http://securitytracker.com/id?1015344 · Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only · Vendor Advisory
• http://securityfocus.com/archive/1/445206/100/0/threaded · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0159.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1167 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10623-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3352 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449 · Vendor Advisory