Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

Threat level definition

Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

References:

Apache Homepage (Apache Software Foundation)
mod_proxy_ftp (Apache Software Foundation)
PTF MH01110 - Security fixes for HMC V6R1.3 (IBM)
SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerabilit (sp3x@securityreason.com)
Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability (SecurityReason)
ASA-2008-026 httpd security update (RHSA-2008-0005) (Avaya)
ASA-2008-031 Apache security update (RHSA-2008-0004) (Avaya Inc.)
ASA-2008-032 httpd security update (RHSA-2008-0006) (Avaya)
RHSA-2008:0004-7 - apache security update (Red Hat)
RHSA-2008:0005-4 - httpd security update (Red Hat)
RHSA-2008:0006-6 - httpd security update (Red Hat)
RHSA-2008:0007-2 httpd security update (Red Hat)
RHSA-2008:0008-6 httpd security update (Red Hat)

Privacy Statement
Copyright 2008, SecurityFocus