Secunia Advisory: SA28196  
Release Date: 2007-12-21

Critical:
Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status: Vendor Patch

Software:IBM HTTP Server 6.0.x
IBM HTTP Server 6.1.x

CVE reference:CVE-2007-6203 (Secunia mirror)
CVE-2007-5000 (Secunia mirror)

  Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!

Description:
IBM has acknowledged two vulnerabilities in IBM HTTP Server, which can be exploited by malicious people to conduct cross-site scripting attacks.

For more information:
SA27906
SA28081

Solution:
Apply fixes.

http://www-1.ibm.com/support/docview.wss?uid=swg1PK57952
http://www-1.ibm.com/support/docview.wss?uid=swg1PK58024

Original Advisory:
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg1PK57952
http://www-1.ibm.com/support/docview.wss?uid=swg1PK58024

Other References:
SA27906:
http://secunia.com/advisories/27906/

SA28081:
http://secunia.com/advisories/28081/

資料來源 http://secunia.com/advisories/28196/
arrow
arrow
    全站熱搜
    創作者介紹
    創作者 ivan0914 的頭像
    ivan0914

    I'n Blog 之萬象真藏

    ivan0914 發表在 痞客邦 留言(0) 人氣()