CVE-2006-5752

Publication date 27 June 2007

Last updated 24 July 2024

Ubuntu priority

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform “charset detection” when the content-type is not specified.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
apache2	7.04 feisty	Fixed 2.2.3-3.2ubuntu0.1
	6.10 edgy	Fixed 2.0.55-4ubuntu4.1
	6.06 LTS dapper	Fixed 2.0.55-4ubuntu2.2

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-499-1
Apache vulnerabilities
17 August 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2006-5752