ID de Prueba:	1.3.6.1.4.1.25623.1.0.100130
Categoría:	Web application abuses
Título:	Apache mod_perl 'Apache::Status' and 'Apache2::Status' XSS Vulnerability
Resumen:	According to its version number, the remote version of the; Apache mod_perl module is prone to a cross-site scripting (XSS) vulnerability because it fails to; sufficiently sanitize user-supplied data.
Descripción:	Summary: According to its version number, the remote version of the Apache mod_perl module is prone to a cross-site scripting (XSS) vulnerability because it fails to sufficiently sanitize user-supplied data. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Solution: The vendor has released a fix through the SVN repository. Please see the references for more information. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0796 1021508 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1 1021709 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1 1021988 http://www.securitytracker.com/id?1021988 20090415 XSS with mod_perl perl_status utility http://www.securityfocus.com/archive/1/502709/100/0/threaded 34383 http://www.securityfocus.com/bid/34383 34597 http://secunia.com/advisories/34597 ADV-2009-0943 http://www.vupen.com/english/advisories/2009/0943 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html MDVSA-2009:091 http://www.mandriva.com/security/advisories?name=MDVSA-2009:091 [modperl-cvs] 20090401 svn commit: r761081 - in /perl/modperl/branches/1.x: Changes lib/Apache/Status.pm http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477 [modperl] 20090401 [SECURITY] [CVE-2009-0796] Vulnerability found in Apache::Status and Apache2::Status http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475 http://support.apple.com/kb/HT4435 http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h http://svn.apache.org/viewvc?view=rev&revision=761081 https://bugzilla.redhat.com/show_bug.cgi?id=494402 https://launchpad.net/bugs/cve/2009-0796 oval:org.mitre.oval:def:8488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.