CVE-2008-0005
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
Exploit likelihood
What each source reports
NVD Score used
4.3
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
CVE-2008-0005- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
CVE-2008-0005- Updated
- 2026-11-02
EUVDEUVD-2008-0018 No score
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
EUVD-2008-0018- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m62c-mf8p-77p9 No score
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
GHSA-m62c-mf8p-77p9- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVBELL-CVE-2008-0005
4.3
CVE-2008-0005 does not affect BellSoft software
- Record
BELL-CVE-2008-0005- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
OSV No score
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
CVE-2008-0005- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-0005 No score
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
- Record
DEBIAN-CVE-2008-0005- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.8-1 | 2.2.8-1 |
apache2Debian:13 |
before 2.2.8-1 | 2.2.8-1 |
apache2Debian:14 |
before 2.2.8-1 | 2.2.8-1 |
apacheRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
Show 107 moreShow less
| Package | Affected | Fixed |
|---|---|---|
apache-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-develRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-manualRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
mod_sslRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 1:2.0.59-1.el4s1.10 | 1:2.0.59-1.el4s1.10 |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 1:2.2.4-9.el5s2 | 1:2.2.4-9.el5s2 |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 27 CVEs |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0005 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published January 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.7%, the 96th percentile. Fixed in apache2 2.2.8-1.
References
redhat.com/support/errata/RHSA-2008-0005.html
security.gentoo.org/glsa/glsa-200803-19.xml
secunia.com/advisories/28749
marc.info?l=bugtraq&m=125631037611762&w=2
securityreason.com/securityalert/3526
marc.info?l=bugtraq&m=124654546101607&w=2
Show 194 moreShow less
securityfocus.com/archive/1/486167/100/0/threaded
marc.info?l=bugtraq&m=130497311408250&w=2
securityreason.com/achievement_securityalert/49
redhat.com/archives/fedora-package-announce/2008-February/msg00562.html
securityfocus.com/bid/27234
exchange.xforce.ibmcloud.com/vulnerabilities/39615
secunia.com/advisories/28526
redhat.com/support/errata/RHSA-2008-0006.html
vupen.com/english/advisories/2008/0924/references
redhat.com/support/errata/RHSA-2008-0007.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10812
securitytracker.com/id?1019185
redhat.com/support/errata/RHSA-2008-0008.html
redhat.com/archives/fedora-package-announce/2008-February/msg00541.html
redhat.com/support/errata/RHSA-2008-0009.html
mandriva.com/security/advisories?name=MDVSA-2008:014
secunia.com/advisories/29420
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
support.avaya.com/elmodocs2/security/ASA-2008-032.htm
securityfocus.com/archive/1/505990/100/0/threaded
secunia.com/advisories/28467
secunia.com/advisories/29348
redhat.com/support/errata/RHSA-2008-0004.html
lists.vmware.com/pipermail/security-announce/2009/000062.html
secunia.com/advisories/28607
lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html
mandriva.com/security/advisories?name=MDVSA-2008:015
docs.info.apple.com/article.html?artnum=307562
secunia.com/advisories/28471
ubuntu.com/usn/usn-575-1
secunia.com/advisories/29640
secunia.com/advisories/28977
vupen.com/english/advisories/2008/1875/references
secunia.com/advisories/30732
secunia.com/advisories/35650
mandriva.com/security/advisories?name=MDVSA-2008:016
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2008-0005
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E
lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E
github.com/advisories/GHSA-m62c-mf8p-77p9
docs.bell-sw.com/security/cves/CVE-2008-0005
security-tracker.debian.org/tracker/CVE-2008-0005
access.redhat.com/errata/RHSA-2008:0004
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=289511
bugzilla.redhat.com/show_bug.cgi?id=419931
bugzilla.redhat.com/show_bug.cgi?id=427228
bugzilla.redhat.com/show_bug.cgi?id=427739
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0004.json
access.redhat.com/security/cve/CVE-2007-4465
cve.org/CVERecord?id=CVE-2007-4465
nvd.nist.gov/vuln/detail/CVE-2007-4465
access.redhat.com/security/cve/CVE-2007-5000
cve.org/CVERecord?id=CVE-2007-5000
nvd.nist.gov/vuln/detail/CVE-2007-5000
access.redhat.com/security/cve/CVE-2007-6388
cve.org/CVERecord?id=CVE-2007-6388
nvd.nist.gov/vuln/detail/CVE-2007-6388
access.redhat.com/security/cve/CVE-2008-0005
cve.org/CVERecord?id=CVE-2008-0005
access.redhat.com/errata/RHSA-2008:0005
bugzilla.redhat.com/show_bug.cgi?id=250731
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0005.json
access.redhat.com/security/cve/CVE-2007-3847
cve.org/CVERecord?id=CVE-2007-3847
nvd.nist.gov/vuln/detail/CVE-2007-3847
access.redhat.com/errata/RHSA-2008:0006
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0006.json
access.redhat.com/errata/RHSA-2008:0007
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0007.json
access.redhat.com/errata/RHSA-2008:0008
bugzilla.redhat.com/show_bug.cgi?id=427229
bugzilla.redhat.com/show_bug.cgi?id=427230
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0008.json
access.redhat.com/security/cve/CVE-2007-6421
cve.org/CVERecord?id=CVE-2007-6421
nvd.nist.gov/vuln/detail/CVE-2007-6421
access.redhat.com/security/cve/CVE-2007-6422
cve.org/CVERecord?id=CVE-2007-6422
nvd.nist.gov/vuln/detail/CVE-2007-6422
access.redhat.com/errata/RHSA-2008:0009
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0009.json
access.redhat.com/errata/RHSA-2010:0602
redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Updating_Certificate_System_Packages-Updating_a_Solaris_9_system_using_pkgrm_and_pkgadd.html
bugzilla.redhat.com/show_bug.cgi?id=200732
bugzilla.redhat.com/show_bug.cgi?id=237079
bugzilla.redhat.com/show_bug.cgi?id=237080
bugzilla.redhat.com/show_bug.cgi?id=237084
bugzilla.redhat.com/show_bug.cgi?id=237085
bugzilla.redhat.com/show_bug.cgi?id=240423
bugzilla.redhat.com/show_bug.cgi?id=244658
bugzilla.redhat.com/show_bug.cgi?id=244803
bugzilla.redhat.com/show_bug.cgi?id=245111
bugzilla.redhat.com/show_bug.cgi?id=245112
bugzilla.redhat.com/show_bug.cgi?id=247972
bugzilla.redhat.com/show_bug.cgi?id=247976
bugzilla.redhat.com/show_bug.cgi?id=323571
bugzilla.redhat.com/show_bug.cgi?id=333791
bugzilla.redhat.com/show_bug.cgi?id=427766
bugzilla.redhat.com/show_bug.cgi?id=429821
bugzilla.redhat.com/show_bug.cgi?id=443928
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0602.json
access.redhat.com/security/cve/CVE-2005-2090
cve.org/CVERecord?id=CVE-2005-2090
nvd.nist.gov/vuln/detail/CVE-2005-2090
access.redhat.com/security/cve/CVE-2005-3510
cve.org/CVERecord?id=CVE-2005-3510
nvd.nist.gov/vuln/detail/CVE-2005-3510
access.redhat.com/security/cve/CVE-2006-3835
cve.org/CVERecord?id=CVE-2006-3835
nvd.nist.gov/vuln/detail/CVE-2006-3835
access.redhat.com/security/cve/CVE-2006-3918
cve.org/CVERecord?id=CVE-2006-3918
nvd.nist.gov/vuln/detail/CVE-2006-3918
access.redhat.com/security/cve/CVE-2006-5752
cve.org/CVERecord?id=CVE-2006-5752
nvd.nist.gov/vuln/detail/CVE-2006-5752
access.redhat.com/security/cve/CVE-2007-0450
cve.org/CVERecord?id=CVE-2007-0450
nvd.nist.gov/vuln/detail/CVE-2007-0450
access.redhat.com/security/cve/CVE-2007-1349
cve.org/CVERecord?id=CVE-2007-1349
nvd.nist.gov/vuln/detail/CVE-2007-1349
access.redhat.com/security/cve/CVE-2007-1358
cve.org/CVERecord?id=CVE-2007-1358
nvd.nist.gov/vuln/detail/CVE-2007-1358
access.redhat.com/security/cve/CVE-2007-1863
cve.org/CVERecord?id=CVE-2007-1863
nvd.nist.gov/vuln/detail/CVE-2007-1863
cve.org/CVERecord?id=CVE-2007-3304
nvd.nist.gov/vuln/detail/CVE-2007-3304
cve.org/CVERecord?id=CVE-2007-3382
nvd.nist.gov/vuln/detail/CVE-2007-3382
cve.org/CVERecord?id=CVE-2007-3385
nvd.nist.gov/vuln/detail/CVE-2007-3385
cve.org/CVERecord?id=CVE-2007-5116
nvd.nist.gov/vuln/detail/CVE-2007-5116
cve.org/CVERecord?id=CVE-2007-5333
nvd.nist.gov/vuln/detail/CVE-2007-5333
cve.org/CVERecord?id=CVE-2007-5461
nvd.nist.gov/vuln/detail/CVE-2007-5461
cve.org/CVERecord?id=CVE-2008-0128
nvd.nist.gov/vuln/detail/CVE-2008-0128
cve.org/CVERecord?id=CVE-2008-1232
nvd.nist.gov/vuln/detail/CVE-2008-1232
nvd.nist.gov/vuln/detail/CVE-2008-1927
suse.com/security/cve/CVE-2005-3352
suse.com/security/cve/CVE-2005-3357
suse.com/security/cve/CVE-2006-3747
suse.com/security/cve/CVE-2006-5752
suse.com/security/cve/CVE-2007-1862
suse.com/security/cve/CVE-2007-1863
suse.com/security/cve/CVE-2007-3304
suse.com/security/cve/CVE-2007-3847
suse.com/security/cve/CVE-2007-4465
suse.com/security/cve/CVE-2007-5000
suse.com/security/cve/CVE-2007-6388
suse.com/security/cve/CVE-2007-6420
suse.com/security/cve/CVE-2007-6421
suse.com/security/cve/CVE-2007-6422
suse.com/security/cve/CVE-2008-0005
suse.com/security/cve/CVE-2008-1678
suse.com/security/cve/CVE-2008-2364
suse.com/security/cve/CVE-2008-2939
suse.com/security/cve/CVE-2016-5387
suse.com/security/cve/CVE-2016-8740
suse.com/security/cve/CVE-2017-9798
suse.com/security/cve/CVE-2019-10081
suse.com/security/cve/CVE-2019-10082
suse.com/security/cve/CVE-2019-10092
Left out here: 92 references. The JSON record has them.