CVE-2008-2939: XSS
Cross-site scripting (XSS) vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2939?
CVE-2008-2939 has been classified as a moderate severity vulnerability due to its nature of potential cross-site scripting attacks.
How do I fix CVE-2008-2939?
To fix CVE-2008-2939, upgrade to Apache HTTP Server version 2.2.10 or later.
What systems are affected by CVE-2008-2939?
CVE-2008-2939 affects Apache HTTP Server versions up to 2.0.63 and 2.2.9 and earlier in the Ubuntu and openSUSE Linux distributions.
What type of attack is CVE-2008-2939 associated with?
CVE-2008-2939 is associated with cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts.
Is there a workaround for CVE-2008-2939?
There are no official workarounds for CVE-2008-2939; upgrading to a patched version is the recommended solution.