CVEvulnerability

CVE-2008-2939

4.3 MEDIUM Published 2008-08-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-08-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.

Affected configurations

• apache http server (<= 2.0.63) • apache http server (>= 2.2.0 <= 2.2.9) • apple mac os x (<= 10.5.6) • canonical ubuntu linux 6.06 • canonical ubuntu linux 7.10 • canonical ubuntu linux 8.04 • opensuse opensuse 10.2 • opensuse opensuse 10.3 • opensuse opensuse 11.0

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References