CVE-2006-3918
published 2006-07-28CVE-2006-3918: http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2…
PriorityP428medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
94.93%
99.9th percentile
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect HTTP requests containing a malicious payload in the 'Expect' request header — the unsanitized value is reflected verbatim in Apache/IBM HTTP Server error responses, enabling XSS. ↗
- →Monitor for Flash SWF files (ActionScript LoadVars) sending HTTP requests with crafted 'Expect' headers containing script content to Apache endpoints — this is the demonstrated attack delivery mechanism. ↗
- →Alert on HTTP responses from Apache/IBM HTTP Server that echo back the contents of the 'Expect' request header unescaped in error message bodies (HTTP 4xx responses). ↗
- →Use the Google dork 'allintitle:"Oracle HTTP Server -"' to identify potentially vulnerable Oracle HTTP Server 10g instances exposed on the internet. ↗
- ·The vulnerability is fixed in Apache HTTP Server 1.3.35, 2.0.58, and 2.2.2 — versions prior to these thresholds in each branch are vulnerable. ↗
- ·IBM HTTP Server is also affected: versions 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1 are vulnerable. ↗
- ·Oracle HTTP Server 10g (10.1.2.0.2), based on Apache 1.3, is vulnerable; upgrading to OHS 11g (based on Apache 2.2) is the recommended remediation path. Apache security patches should NOT be applied directly to OHS 10g. ↗
- ·Exploitation requires a client (e.g., Flash SWF) capable of sending arbitrary HTTP headers; standard browsers alone are insufficient for exploitation. ↗
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3LOW
vendor_redhat4.3MEDIUM
vendor_ubuntu4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-67m9-fpj8-vgmv: http_protocol
ghsa_unreviewed·2022-05-03
CVE-2006-3918 [MEDIUM] GHSA-67m9-fpj8-vgmv: http_protocol
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
GHSA
GHSA-g7xr-j224-9v5w: Apache HTTP Server 2
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2007-6203 [MEDIUM] CWE-79 GHSA-g7xr-j224-9v5w: Apache HTTP Server 2
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
GHSA
GHSA-9rmf-q528-p6rv: Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2007-5944 [MEDIUM] CWE-79 GHSA-9rmf-q528-p6rv: Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5
Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.
OSV
CVE-2007-6203: Apache HTTP Server 2
osv·2007-12-03·CVSS 4.3
CVE-2007-6203 [MEDIUM] CVE-2007-6203: Apache HTTP Server 2
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
OSV
CVE-2006-3918: http_protocol
osv·2006-07-28·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918: http_protocol
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Ubuntu
Apache vulnerabilities
vendor_ubuntu·2008-02-04·CVSS 4.3
CVE-2006-3918 [MEDIUM] Apache vulnerabilities
Title: Apache vulnerabilities
Summary: Apache vulnerabilities
It was discovered that Apache did not sanitize the Expect header from
an HTTP request when it is reflected back in an error message, which
could result in browsers becoming vulnerable to cross-site scripting
attacks when processing the output. With cross-site scripting
vulnerabilities, if a user were tricked into viewing server output
during a crafted server request, a remote attacker could exploit this
to modify the contents, or steal confidential data (such as passwords),
within the same domain. This was only vulnerable in Ubuntu 6.06.
(CVE-2006-3918)
It was discovered that when configured as a proxy server and using a
threaded MPM, Apache did not properly sanitize its input. A remote
attacker could send Apache crafted date
Red Hat
httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
vendor_redhat·2007-11-30·CVSS 4.3
CVE-2007-6203 [MEDIUM] httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
Statement: Red Hat does not consider this issue to be a vulnerability. In order to exploit this for cross-site scripting, the attacker would have to get the victim to supply an arbitrary malformed HTTP method to a target site. However, this has been fixed in Red Hat Enterp
Debian
CVE-2007-6203: apache2 - Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier h...
vendor_debian·2007·CVSS 4.3
CVE-2007-6203 [MEDIUM] CVE-2007-6203: apache2 - Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier h...
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
Scope: local
bookworm: resolved (fixed in 2.2.6-3)
bullseye: resolved (fixed in 2.2.6-3)
forky: resolved (fixed in 2.2.6-3)
sid: resolved (fixed in 2.2.6-3)
trixie: resolved (fixed in 2.2.6-3)
Red Hat
httpd: Expect header XSS
vendor_redhat·2006-05-08·CVSS 4.3
CVE-2006-3918 [MEDIUM] CWE-79 httpd: Expect header XSS
httpd: Expect header XSS
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Debian
CVE-2006-3918: apache2 - http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0....
vendor_debian·2006·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918: apache2 - http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0....
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Scope: local
bookworm: resolved (fixed in 2.0.55-4.1)
bullseye: resolved (fixed in 2.0.55-4.1)
forky: resolved (fixed in 2.0.55-4.1)
sid: resolved (fixed in 2.0.55-4.1)
trixie: resolved (fixed in 2.0.55-4.1)
No detection rules found.
Exploit-DB
Oracle HTTP Server - Cross-Site Scripting Header Injection
exploitdb·2011-06-13·CVSS 4.3
CVE-2006-3918 [MEDIUM] Oracle HTTP Server - Cross-Site Scripting Header Injection
Oracle HTTP Server - Cross-Site Scripting Header Injection
---
Oracle HTTP Server XSS Header Injection
# Attack Pattern ID : CAPEC-86
# CWE ID : CI-79
# OWASP IDs : A1-Injections, A2-Cross Site Scripting (XSS)
# CVE ID : not yet
# Related CVEs : CVE-2006-3918, CVE-2007-0275
# A.K.A : Unfiltered Header Injection
# Product Type : Application
# Vendor : Oracle Corporation
# Product : Oracle HTTP Server for Oracle Application Server 10g
# Vulnerable Versions: 10.1.2.0.2
# Probably Vulnerable: (not tested) 10.1.2.0.0, 9.0.4.3.0, 9.0.4.2.0, 9.0.4.1.0, 9.0.4.0.0
# Severity : Medium
# Tested on : Linux, Windows Server 2003
# Download link : http://www.oracle.com/technetwork/middleware/ias/downloads/101201se-090616.html
# Date : 12/06/2011
# Google Dork : allintitle:"Oracle HTTP Server -"
[-] Cre
Exploit-DB
Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security
exploitdb·2006-08-24
CVE-2006-3918 Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security
Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security
---
source: https://www.securityfocus.com/bid/19661/info
Apache HTTP server is prone to a security weakness related to HTTP request headers.
An attacker may exploit this issue to steal cookie-based authentication credentials and launch other attacks.
var req:LoadVars=new LoadVars();
req.addRequestHeader("Expect",
"alert('gotcha!')");
req.send("http://www.target.site/","_blank","GET");
Bugzilla
CVE-2007-6203 httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
bugzilla·2007-12-04·CVSS 4.3
CVE-2007-6203 [MEDIUM] CVE-2007-6203 httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
CVE-2007-6203 httpd: Garbage before http method name is not escaped in a reply in case of errorneous request
Common Vulnerabilities and Exposures assigned an identifier CVE-2007-6203 to the following vulnerability:
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
References:
http://www.securityfocus.com/archive/1/archive/1/484410/100/0/threaded
http://procheckup.com/Vulnerability_PR07-37.php
http://www.securityf
Bugzilla
CVE-2005-3352, CVE-2006-3918 apache security issues
bugzilla·2006-09-25·CVSS 4.3
CVE-2005-3352 [MEDIUM] CVE-2005-3352, CVE-2006-3918 apache security issues
CVE-2005-3352, CVE-2006-3918 apache security issues
Description of problem:
The following issues affect the stronghold-apache package:
CVE-2006-3918 Expect header XSS
CVE-2005-3352 cross-site scripting flaw in mod_imap
Version-Release number of selected component (if applicable):
stronghold-apache-1.3.22-25
Discussion:
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.
http://rhn.redhat.com/errata/RHSA-2006-0692.html
---
*** Bug 204049 has been marked as a duplicate of this bug. ***
Bugzilla
CVE-2006-3918 Expect header XSS
bugzilla·2006-08-25·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918 Expect header XSS
CVE-2006-3918 Expect header XSS
+++ This bug was initially created as a clone of Bug #204048 +++
In May 2006 a reporter found a bug in Apache where an invalid Expect header sent
to the server (Apache 1.3.3 onwards) would be returned to the user in an error
message, unescaped. This could allow a cross-site scripting attack only if a
victim can tricked into connecting to a site and sending such a carefully
crafted Expect header. Whist browsers do not provide this functionality, it was
recently discovered that Flash allows you to make a connection with arbitrary
headers. The attack mechanism is therefore:
1. User is tricked into visiting a malicious web site with a flash-enabled browser
2. Malicious web site uses a flash movie to make a connection to the target site
with custom Expect head
Bugzilla
CVE-2006-3918 Expect header XSS
bugzilla·2006-08-25·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918 Expect header XSS
CVE-2006-3918 Expect header XSS
In May 2006 a reporter found a bug in Apache where an invalid Expect header sent
to the server (Apache 1.3.3 onwards) would be returned to the user in an error
message, unescaped. This could allow a cross-site scripting attack only if a
victim can tricked into connecting to a site and sending such a carefully
crafted Expect header. Whist browsers do not provide this functionality, it was
recently discovered that Flash allows you to make a connection with arbitrary
headers. The attack mechanism is therefore:
1. User is tricked into visiting a malicious web site with a flash-enabled browser
2. Malicious web site uses a flash movie to make a connection to the target site
with custom Expect header
3. This results in cross-site scripting (attacker could steal y
Bugzilla
CVE-2006-3918 httpd: Expect header XSS
bugzilla·2006-07-31·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918 httpd: Expect header XSS
CVE-2006-3918 httpd: Expect header XSS
In May 2006 a reporter found a bug in Apache where an invalid Expect header sent
to the server (Apache 1.3.3 onwards) would be returned to the user in an error
message, unescaped. This could allow a cross-site scripting attack only if a
victim can tricked into connecting to a site and sending such a carefully
crafted Expect header. Whist browsers do not provide this functionality, it was
recently discovered that Flash allows you to make a connection with arbitrary
headers. The attack mechanism is therefore:
1. User is tricked into visiting a malicious web site with a flash-enabled browser
2. Malicious web site uses a flash movie to make a connection to the target site
with custom Expect header
3. This results in cross-site scripting (attacker could
Bugzilla
CVE-2006-3918 Expect header XSS
bugzilla·2006-07-31·CVSS 4.3
CVE-2006-3918 [MEDIUM] CVE-2006-3918 Expect header XSS
CVE-2006-3918 Expect header XSS
+++ This bug was initially created as a clone of Bug #200732 +++
In May 2006 a reporter found a bug in Apache where an invalid Expect header sent
to the server (Apache 1.3.3 onwards) would be returned to the user in an error
message, unescaped. This could allow a cross-site scripting attack only if a
victim can tricked into connecting to a site and sending such a carefully
crafted Expect header. Whist browsers do not provide this functionality, it was
recently discovered that Flash allows you to make a connection with arbitrary
headers. The attack mechanism is therefore:
1. User is tricked into visiting a malicious web site with a flash-enabled browser
2. Malicious web site uses a flash movie to make a connection to the target site
with custom Expect head
ftp://patches.sgi.com/support/free/security/advisories/20060801-01-Phttp://archives.neohapsis.com/archives/bugtraq/2006-05/0151.htmlhttp://archives.neohapsis.com/archives/bugtraq/2006-07/0425.htmlhttp://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.htmlhttp://marc.info/?l=bugtraq&m=125631037611762&w=2http://marc.info/?l=bugtraq&m=129190899612998&w=2http://marc.info/?l=bugtraq&m=130497311408250&w=2http://openbsd.org/errata.html#httpd2http://rhn.redhat.com/errata/RHSA-2006-0618.htmlhttp://rhn.redhat.com/errata/RHSA-2006-0692.htmlhttp://secunia.com/advisories/21172http://secunia.com/advisories/21174http://secunia.com/advisories/21399http://secunia.com/advisories/21478http://secunia.com/advisories/21598http://secunia.com/advisories/21744http://secunia.com/advisories/21848http://secunia.com/advisories/21986http://secunia.com/advisories/22140http://secunia.com/advisories/22317http://secunia.com/advisories/22523http://secunia.com/advisories/28749http://secunia.com/advisories/29640http://secunia.com/advisories/40256http://securityreason.com/securityalert/1294http://securitytracker.com/id?1016569http://support.avaya.com/elmodocs2/security/ASA-2006-194.htmhttp://svn.apache.org/viewvc?view=rev&revision=394965http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631http://www-1.ibm.com/support/docview.wss?uid=swg24013080http://www.debian.org/security/2006/dsa-1167http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.htmlhttp://www.novell.com/linux/security/advisories/2006_51_apache.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0619.htmlhttp://www.securityfocus.com/bid/19661http://www.securitytracker.com/id?1024144http://www.ubuntu.com/usn/usn-575-1http://www.vupen.com/english/advisories/2006/2963http://www.vupen.com/english/advisories/2006/2964http://www.vupen.com/english/advisories/2006/3264http://www.vupen.com/english/advisories/2006/4207http://www.vupen.com/english/advisories/2006/5089http://www.vupen.com/english/advisories/2010/1572http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ehttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238ftp://patches.sgi.com/support/free/security/advisories/20060801-01-Phttp://archives.neohapsis.com/archives/bugtraq/2006-05/0151.htmlhttp://archives.neohapsis.com/archives/bugtraq/2006-07/0425.htmlhttp://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.htmlhttp://marc.info/?l=bugtraq&m=125631037611762&w=2http://marc.info/?l=bugtraq&m=129190899612998&w=2http://marc.info/?l=bugtraq&m=130497311408250&w=2http://openbsd.org/errata.html#httpd2http://rhn.redhat.com/errata/RHSA-2006-0618.htmlhttp://rhn.redhat.com/errata/RHSA-2006-0692.htmlhttp://secunia.com/advisories/21172http://secunia.com/advisories/21174http://secunia.com/advisories/21399http://secunia.com/advisories/21478http://secunia.com/advisories/21598http://secunia.com/advisories/21744http://secunia.com/advisories/21848http://secunia.com/advisories/21986http://secunia.com/advisories/22140http://secunia.com/advisories/22317http://secunia.com/advisories/22523http://secunia.com/advisories/28749http://secunia.com/advisories/29640http://secunia.com/advisories/40256http://securityreason.com/securityalert/1294http://securitytracker.com/id?1016569http://support.avaya.com/elmodocs2/security/ASA-2006-194.htmhttp://svn.apache.org/viewvc?view=rev&revision=394965http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631http://www-1.ibm.com/support/docview.wss?uid=swg24013080http://www.debian.org/security/2006/dsa-1167http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.htmlhttp://www.novell.com/linux/security/advisories/2006_51_apache.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0619.htmlhttp://www.securityfocus.com/bid/19661http://www.securitytracker.com/id?1024144http://www.ubuntu.com/usn/usn-575-1http://www.vupen.com/english/advisories/2006/2963http://www.vupen.com/english/advisories/2006/2964http://www.vupen.com/english/advisories/2006/3264http://www.vupen.com/english/advisories/2006/4207http://www.vupen.com/english/advisories/2006/5089http://www.vupen.com/english/advisories/2010/1572
+ 12 more references
2006-07-28
Published