Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2008-0005

UNKNOWN

mod_proxy_ftp in Apache 2

Published Jan 12, 2008

Modified 1 years ago

No fix available

Details

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

References

WEBhttp://docs.info.apple.com/article.html?artnum=307562 ADVISORYhttp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html WEBhttp://lists.vmware.com/pipermail/security-announce/2009/000062.html ADVISORYhttp://marc.info/?l=bugtraq&m=124654546101607&w=2 ADVISORYhttp://marc.info/?l=bugtraq&m=125631037611762&w=2 ADVISORYhttp://marc.info/?l=bugtraq&m=130497311408250&w=2 ADVISORYhttp://secunia.com/advisories/28467 ADVISORYhttp://secunia.com/advisories/28471 ADVISORYhttp://secunia.com/advisories/28526 ADVISORYhttp://secunia.com/advisories/28607 ADVISORYhttp://secunia.com/advisories/28749 ADVISORYhttp://secunia.com/advisories/28977 ADVISORYhttp://secunia.com/advisories/29348 ADVISORYhttp://secunia.com/advisories/29420 ADVISORYhttp://secunia.com/advisories/29640 ADVISORYhttp://secunia.com/advisories/30732 ADVISORYhttp://secunia.com/advisories/35650 ADVISORYhttp://security.gentoo.org/glsa/glsa-200803-19.xml ADVISORYhttp://securityreason.com/achievement_securityalert/49 ADVISORYhttp://securityreason.com/securityalert/3526 WEBhttp://support.avaya.com/elmodocs2/security/ASA-2008-032.htm ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:014 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:015 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:016 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0004.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0005.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0006.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0007.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0008.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0009.html WEBhttp://www.securityfocus.com/archive/1/486167/100/0/threaded WEBhttp://www.securityfocus.com/archive/1/505990/100/0/threaded WEBhttp://www.securityfocus.com/bid/27234 WEBhttp://www.securitytracker.com/id?1019185 ADVISORYhttp://www.ubuntu.com/usn/usn-575-1 WEBhttp://www.vupen.com/english/advisories/2008/0924/references WEBhttp://www.vupen.com/english/advisories/2008/1875/references WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/39615 WEBhttps://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E WEBhttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10812 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2008-0005 ADVISORYhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html ADVISORYhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJan 12, 2008

ModifiedAug 7, 2024

CVE-2008-0005 | Mondoo Vulnerability Intelligence