CVE-2008-2939
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...
4.3 MediumFix available
CVE-2008-2939 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published August 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 39.0%, the 98th percentile. Fixed in apache2 2.2.9-7.
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
Exploit likelihood
39.0%Up 31.6 points since Feb 4, 2022
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- Updated
- 2026-11-02
EUVDEUVD-2008-2931 No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
EUVD-2008-2931- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-26m2-7wh6-pcq6 No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
GHSA-26m2-7wh6-pcq6- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2939 No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
DEBIAN-CVE-2008-2939- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.9-7 | 2.2.9-7 |
apache2Debian:13 |
before 2.2.9-7 | 2.2.9-7 |
apache2Debian:14 |
before 2.2.9-7 | 2.2.9-7 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.10-1.el5s2 | 1:2.2.10-1.el5s2 |
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
Show 122 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 |
before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-PgRed Hat:rhel_application_stack:2 |
before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBD-Pg-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 |
before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
php-pearRed Hat:rhel_application_stack:2 |
before 1:1.7.2-2.el5s2 | 1:1.7.2-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 |
before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
httpdRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::as |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::desktop |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::es |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::ws |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::client |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::client |
before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::server |
before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
antRed Hat:certificate_system:7.3 |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
svn.apache.org/viewvc?view=rev&revision=682868
secunia.com/advisories/34219
marc.info?l=bugtraq&m=125631037611762&w=2
support.apple.com/kb/HT3549
lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1
Show 194 moreShow less
securityfocus.com/archive/1/498567/100/0/threaded
rapid7.com/advisories/R7-0033
rhn.redhat.com/errata/RHSA-2008-0967.html
lists.apple.com/archives/security-announce/2009/May/msg00002.html
ubuntu.com/usn/USN-731-1
vupen.com/english/advisories/2009/0320
www-1.ibm.com/support/docview.wss?uid=swg1PK70197
redhat.com/support/errata/RHSA-2008-0966.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316
mandriva.com/security/advisories?name=MDVSA-2008:194
us-cert.gov/cas/techalerts/TA09-133A.html
securitytracker.com/id?1020635
wiki.rpath.com/Advisories:rPSA-2008-0327
kb.cert.org/vuls/id/663763
exchange.xforce.ibmcloud.com/vulnerabilities/44223
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2008-2939
access.redhat.com/errata/RHSA-2008:0966
bugzilla.redhat.com/show_bug.cgi?id=458250
github.com/advisories/GHSA-26m2-7wh6-pcq6
security-tracker.debian.org/tracker/CVE-2008-2939
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0966.json
cve.org/CVERecord?id=CVE-2007-6420
suse.com/security/cve/CVE-2005-3352
This page doesn't list everything
Left out here: 80 references. The JSON record has them.