apache: cross-site scripting

Package(s): apache CVE #(s): CVE-2005-3352

Created: December 14, 2005 Updated: May 10, 2006

Description: Versions 1 and 2 of the apache web server suffer from a cross-site scripting vulnerability in the mod_imap module; see this bugzilla entry for details.

Alerts:

Slackware	SSA:2006-129-01	apache	2006-05-10
SuSE	SUSE-SR:2006:004	resmgr, php, ethereal, apache2	2006-02-24
Fedora-Legacy	FLSA:175406	Apache	2006-02-18
Gentoo	200602-03	apache	2006-02-06
Fedora	FEDORA-2006-052	httpd	2006-01-20
Red Hat	RHSA-2006:0158-01	httpd	2006-01-17
Ubuntu	USN-241-1	apache2, apache	2006-01-12
Trustix	TSLSA-2005-0074	apache libc-client	2005-12-23
Mandriva	MDKSA-2006:007	apache2	2006-01-05
Red Hat	RHSA-2006:0159-01	httpd	2006-01-05
OpenPKG	OpenPKG-SA-2005.029	apache	2005-12-14