Description

This alert was generated using only banner information. It may be a false positive.

Fixed in Apache httpd 2.2.10:
  • low: mod_proxy_ftp globbing XSS CVE-2008-2939
    A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp is enabled to support FTP-over-HTTP, requests containing globbing characters could lead to cross-site scripting (XSS) attacks.

Affected Apache versions (2.2.9, 2.2.8, 2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, 2.2.0).

Remediation

Upgrade Apache 2.x to the latest version.

References

Apache homepage

Apache httpd 2.2 vulnerabilities

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2057)

WordPress Plugin Simple Membership Cross-Site Scripting (3.5.6)

WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3)

MySQL Resource Management Errors Vulnerability (CVE-2010-3833)

WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (4.6.12)

Severity

Low

Classification

CVE-2008-2939 CVE-2010-2791 CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS Missing Update