First published: Tue Feb 12 2008(Updated: )
Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM iSeries AS/400 | =v5r3m0 | |
IBM iSeries AS/400 | =v5r4m0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0694 has a moderate severity level due to its potential for cross-site scripting attacks.
To fix CVE-2008-0694, apply the latest security patches provided for IBM OS/400 versions V5R3M0 and V5R4M0.
CVE-2008-0694 specifically affects IBM OS/400 versions V5R3M0 and V5R4M0.
CVE-2008-0694 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.
Yes, CVE-2008-0694 can be exploited remotely by attackers through the manipulation of the Expect HTTP header.