• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Apache HTTP Server 413 Error HTTP Request Method Cross-Site Scripting Weakness

References:

• Apache Homepage (Apache Software Foundation)
  
• ASF Bugzilla Bug 44014 (Apache Software Foundation)
  
• httpd 2.2.8 Changelog (Apache Software Foundation)
  
• PK65782; 2.0.47.1: IBM HTTP Server V2.0.47 Cumulative Interim Fix (IBM)
  
• PTF MH01110 - Security fixes for HMC V6R1.3 (IBM)
  
• PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method (research@procheckup.com)
  
• Interstage HTTP Server: Cross-site Scripting Problem (CVE-2007-4465/ CVE-2007-62 (Fujitsu)
  
• PK57952: INPUT METHOD NOT ESCAPED IN DEFAULT 413 ERROR RESPONSE (IBM)