CVE-2008-0005

EPSS 2.7%

發布日:2008/1/12修改日:2026/4/28

也稱為:DEBIAN-CVE-2008-0005

描述

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

受影響套件(1)

Debian/apache2from 0, < 2.2.8-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-0005