CVE-2008-2939
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...
4.3 MediumFix available
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
Exploit likelihood
39.0%Up 31.6 points since Feb 4, 2022
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- Updated
- 2026-11-02
EUVDEUVD-2008-2931No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
EUVD-2008-2931- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-26m2-7wh6-pcq6No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
GHSA-26m2-7wh6-pcq6- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVNo score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
CVE-2008-2939- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2939No score
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
- Record
DEBIAN-CVE-2008-2939- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 | before 2.2.9-7 | 2.2.9-7 |
apache2Debian:13 | before 2.2.9-7 | 2.2.9-7 |
apache2Debian:14 | before 2.2.9-7 | 2.2.9-7 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 1:2.2.10-1.el5s2 | 1:2.2.10-1.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
Show 122 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-PgRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBD-Pg-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 1:1.7.2-2.el5s2 | 1:1.7.2-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 3 CVEs | before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs | before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 27 CVEs | before 2.4.49-1.1 | 2.4.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2939 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published August 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 39.0%, the 98th percentile. Fixed in apache2 2.2.9-7.
References
svn.apache.org/viewvc?view=rev&revision=682868
secunia.com/advisories/34219
marc.info?l=bugtraq&m=125631037611762&w=2
support.apple.com/kb/HT3549
lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1
Show 194 moreShow less
securityfocus.com/archive/1/498567/100/0/threaded
rapid7.com/advisories/R7-0033
rhn.redhat.com/errata/RHSA-2008-0967.html
lists.apple.com/archives/security-announce/2009/May/msg00002.html
ubuntu.com/usn/USN-731-1
vupen.com/english/advisories/2009/0320
www-1.ibm.com/support/docview.wss?uid=swg1PK70197
redhat.com/support/errata/RHSA-2008-0966.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316
mandriva.com/security/advisories?name=MDVSA-2008:194
us-cert.gov/cas/techalerts/TA09-133A.html
securitytracker.com/id?1020635
wiki.rpath.com/Advisories:rPSA-2008-0327
kb.cert.org/vuls/id/663763
exchange.xforce.ibmcloud.com/vulnerabilities/44223
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2008-2939
access.redhat.com/errata/RHSA-2008:0966
bugzilla.redhat.com/show_bug.cgi?id=458250
github.com/advisories/GHSA-26m2-7wh6-pcq6
security-tracker.debian.org/tracker/CVE-2008-2939
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0966.json
cve.org/CVERecord?id=CVE-2007-6420
suse.com/security/cve/CVE-2005-3352
This page doesn't list everything
Left out here: 80 references. The JSON record has them.