CVE-2006-3918

Description

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
apache	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	7.10 gutsy	Not in release
	7.04 feisty	Fixed in 1.3.34-4ubuntu1
	6.10 edgy	Fixed in 1.3.34-4ubuntu1
	6.06 LTS dapper	Ignored end of life
apache2	9.10 karmic	Fixed in 2.2.4-3
	9.04 jaunty	Fixed in 2.2.4-3
	8.10 intrepid	Fixed in 2.2.4-3
	8.04 LTS hardy	Fixed in 2.2.4-3
	7.10 gutsy	Fixed in 2.2.4-3
	7.04 feisty	Fixed in 2.2.3-3.2ubuntu0.1
	6.10 edgy	Fixed in 2.0.55-4ubuntu4.1
	6.06 LTS dapper	Fixed in 2.0.55-4ubuntu2.3

Notes

jdstrand

verify edgy is fixed

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
apache2	Vendor: http://snapshot.debian.net/cgi-bin/packages.cgi

Description

Status

Notes

jdstrand

Patch details

References

Related Ubuntu Security Notices (USN)

Other references

Access our resources on patching vulnerabilities