CVE-2005-3352

N/A Unknown
Published: December 13, 2005 Modified: April 16, 2026
View on NVD

Description

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307562
Source: secalert@redhat.com
Broken Link
http://issues.apache.org/bugzilla/show_bug.cgi?id=37874
Source: secalert@redhat.com
Issue Tracking
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Source: secalert@redhat.com
Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0159.html
Source: secalert@redhat.com
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0692.html
Source: secalert@redhat.com
Broken Link
http://secunia.com/advisories/17319
Source: secalert@redhat.com
Not Applicable URL Repurposed
http://secunia.com/advisories/18008
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18333
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18339
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18340
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18429
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18517
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18526
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18585
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/18743
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/19012
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/20046
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/20670
Source: secalert@redhat.com
Not Applicable
http://secunia.com/advisories/21744
Source: secalert@redhat.com
Not Applicable Third Party Advisory
http://secunia.com/advisories/22140
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/22368
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/22388
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/22669
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/23260
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/25239
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/29420
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/29849
Source: secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/30430
Source: secalert@redhat.com
Third Party Advisory
http://securitytracker.com/id?1015344
Source: secalert@redhat.com
Patch Third Party Advisory VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1
Source: secalert@redhat.com
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1
Source: secalert@redhat.com
Third Party Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only
Source: secalert@redhat.com
Third Party Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only
Source: secalert@redhat.com
Third Party Advisory
http://www.debian.org/security/2006/dsa-1167
Source: secalert@redhat.com
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml
Source: secalert@redhat.com
Third Party Advisory
http://www.novell.com/linux/security/advisories/2006_43_apache.html
Source: secalert@redhat.com
Third Party Advisory
http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt
Source: secalert@redhat.com
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0158.html
Source: secalert@redhat.com
Third Party Advisory
http://www.securityfocus.com/archive/1/425399/100/0/threaded
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/445206/100/0/threaded
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/450315/100/0/threaded
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/450321/100/0/threaded
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/15834
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://www.trustix.org/errata/2005/0074/
Source: secalert@redhat.com
Third Party Advisory
http://www.ubuntulinux.org/usn/usn-241-1
Source: secalert@redhat.com
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-150A.html
Source: secalert@redhat.com
Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2005/2870
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2006/2423
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2006/3995
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4015
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4300
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4868
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2008/0924/references
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1246/references
Source: secalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1697
Source: secalert@redhat.com
Third Party Advisory
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007
Source: secalert@redhat.com
Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://docs.info.apple.com/article.html?artnum=307562
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://issues.apache.org/bugzilla/show_bug.cgi?id=37874
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0159.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0692.html
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://secunia.com/advisories/17319
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable URL Repurposed
http://secunia.com/advisories/18008
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18333
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18339
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18340
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18429
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18517
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18526
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18585
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/18743
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/19012
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/20046
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/20670
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21744
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable Third Party Advisory
http://secunia.com/advisories/22140
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/22368
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/22388
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/22669
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/23260
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/25239
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/29420
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/29849
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/30430
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://securitytracker.com/id?1015344
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory VDB Entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.470158
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.685483
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.debian.org/security/2006/dsa-1167
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.novell.com/linux/security/advisories/2006_43_apache.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0158.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/archive/1/425399/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/445206/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/450315/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/450321/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/15834
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.trustix.org/errata/2005/0074/
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.ubuntulinux.org/usn/usn-241-1
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-150A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2005/2870
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/2423
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/3995
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4015
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4300
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4868
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2008/0924/references
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1246/references
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1697
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

162 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
25.6%
96th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

apache