CVE-2007-6203: XSS
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6203?
CVE-2007-6203 is considered a medium severity vulnerability, allowing potential cross-site scripting attacks.
How do I fix CVE-2007-6203?
To fix CVE-2007-6203, upgrade the Apache HTTP Server to a patch version that addresses this vulnerability.
What versions of Apache HTTP Server are affected by CVE-2007-6203?
The affected versions include Apache HTTP Server 2.0.x and 2.2.x, specifically versions 2.0.47 through 2.2.4.
What type of attack can CVE-2007-6203 facilitate?
CVE-2007-6203 can facilitate cross-site scripting (XSS) attacks using the reflected HTTP Method specifier.
Is CVE-2007-6203 specific to any operating system?
No, CVE-2007-6203 is not specific to any operating system; it affects the Apache HTTP Server regardless of the platform.