• info
• discussion
• exploit
• solution
• references

Apache HTTP Server 2.2.6, 2.0.61 and 1.3.39 'mod_status' Cross-Site Scripting Vulnerability

Solution:
Updates are available. Please see the references for more information.


Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0

• Fujitsu INTS-APSREEG6.0_PUF_T0103S-07A.tar.Z
  for Solaris
  http://www.fujitsu.com/downloads/SEC/INTS-APSREEG6.0_PUF_T0103S-07A.ta r.Z

Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0

• Fujitsu INTS-APSREE7.0_PUF_T013RS-06.tar.Z
  for Solaris
  http://www.fujitsu.com/downloads/SEC/INTS-APSREE7.0_PUF_T013RS-06.tar. Z


• Fujitsu TP09823.exe
  for Windows
  http://www.fujitsu.com/downloads/SEC/TP09823.exe

Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0

• Fujitsu 912327-11.tar.Z
  for Solaris
  http://www.fujitsu.com/downloads/SEC/912327-11.tar.Z


• Fujitsu TP09823.exe
  for Windows
  http://www.fujitsu.com/downloads/SEC/TP09823.exe

Apple Mac OS X Server 10.5

• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

Apple Mac OS X 10.4.11

• Apple SecUpd2008-002PPC.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002PPC.dmg


• Apple SecUpd2008-002Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002Univ.dmg


• Apple Security Update 2008-003 (Intel)
  http://www.apple.com/support/downloads/securityupdate2008003intel.html


• Apple Security Update 2008-003 (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003ppc.html

Apple Mac OS X Server 10.5.2

• Apple SecUpdSrvr2008-002.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002.dmg


• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1

• Fujitsu INTS-APSREE7.0.1_PUF_T023AS-05.tar.Z
  for Solaris
  http://www.fujitsu.com/downloads/SEC/INTS-APSREE7.0.1_PUF_T023AS-05.ta r.Z


• Fujitsu TP09823.exe
  for Windows
  http://www.fujitsu.com/downloads/SEC/TP09823.exe