CVE-2005-3352: XSS
Cross-site scripting (XSS) vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3352?
CVE-2005-3352 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2005-3352?
To fix CVE-2005-3352, upgrade to Apache httpd version 1.3.35 or later, or version 2.0.56 or later.
What types of attacks can CVE-2005-3352 facilitate?
CVE-2005-3352 can facilitate cross-site scripting (XSS) attacks by allowing unauthorized scripts to be executed in the user's browser.
Which Apache HTTP Server versions are affected by CVE-2005-3352?
CVE-2005-3352 affects Apache HTTP Server versions prior to 1.3.35 and 2.0.x versions before 2.0.56.
Is mod_imap related to CVE-2005-3352?
Yes, CVE-2005-3352 specifically involves a cross-site scripting vulnerability in the mod_imap module of Apache HTTP Server.