CVE-2006-5752: XSS
Cross-site scripting (XSS) vulnerability in modstatus.c in the modstatus module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5752?
CVE-2006-5752 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-5752?
To fix CVE-2006-5752, disable the ExtendedStatus directive or upgrade to a patched version of Apache HTTP Server.
Which versions of Apache HTTP Server are affected by CVE-2006-5752?
CVE-2006-5752 affects Apache HTTP Server versions from 1.3.2 up to 1.3.39, 2.0.0 to 2.0.61, and 2.2.0 to 2.2.6.
What is the nature of the vulnerability described in CVE-2006-5752?
CVE-2006-5752 is a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.
Can CVE-2006-5752 impact any Linux distributions?
Yes, CVE-2006-5752 can impact various Linux distributions using affected versions of Apache, including Ubuntu and Red Hat.