CVE - CVE - 2005 - 2088

CVE-ID
cve - 2005 - 2088	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
Apache HTTP服务器1.3.34之前,和2.0。x 2.0.55之前,当作为一个HTTP代理,允许远程攻击者毒药web缓存,绕过web应用防火墙保护,并通过一个HTTP请求进行XSS攻击“传输编码:分块”标题和内容长度头,使Apache错误处理和转发请求的主体,导致接收服务器过程中,它作为一个单独的HTTP请求,又名“HTTP请求走私。”
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
MISC: 1014323 URL: http://securitytracker.com/id?1014323 MISC: 102197 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1 - 26 - 102197 - 1~~(过时的来源) MISC: 102198 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1 - 26 - 102198 - 1~~(过时的来源) MISC: 14106 URL: http://www.securityfocus.com/bid/14106 MISC: 14530 URL: http://secunia.com/advisories/14530 MISC: 15647 URL: http://www.securityfocus.com/bid/15647 MISC: 17319 URL: http://secunia.com/advisories/17319 MISC: 17487 URL: http://secunia.com/advisories/17487 MISC: 17813 URL: http://secunia.com/advisories/17813 MISC: 19072 URL: http://secunia.com/advisories/19072 MISC: 19073 URL: http://secunia.com/advisories/19073 MISC: 19185 URL: http://secunia.com/advisories/19185 MISC: 19317 URL: http://secunia.com/advisories/19317 MISC: 20050606新白皮书Watchfire - HTTP请求走私 URL: http://seclists.org/lists/bugtraq/2005/Jun/0025.html MISC: 23074 URL: http://secunia.com/advisories/23074 MISC: 604 URL: http://securityreason.com/securityalert/604 MISC:阿德- 2005 - 2140 URL:~~http://www.vupen.com/english/advisories/2005/2140~~(过时的来源) MISC:阿德- 2005 - 2659 URL:~~http://www.vupen.com/english/advisories/2005/2659~~(过时的来源) MISC:阿德- 2006 - 0789 URL:~~http://www.vupen.com/english/advisories/2006/0789~~(过时的来源) MISC:阿德- 2006 - 1018 URL:~~http://www.vupen.com/english/advisories/2006/1018~~(过时的来源) MISC:阿德- 2006 - 4680 URL:~~http://www.vupen.com/english/advisories/2006/4680~~(过时的来源) MISC:苹果- sa - 2005 - 11 - 29 URL: http://docs.info.apple.com/article.html?artnum=302847 MISC: dsa - 803 URL: http://www.debian.org/security/2005/dsa - 803 MISC: dsa - 805 URL: http://www.debian.org/security/2005/dsa - 805 MISC: HPSBUX02074 URL: http://www.securityfocus.com/archive/1/428138/100/0/threaded MISC: HPSBUX02101 URL: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828 MISC: MDKSA-2005:130 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2005:130~~(过时的来源) MISC: PK13959 URL: http://www - 1. ibm.com/support/search.wss?rs=0&q=pk13959&apar=only MISC: PK16139 URL: http://www - 1. ibm.com/support/search.wss?rs=0&q=pk16139&apar=only MISC: RHSA-2005:582 URL: http://www.redhat.com/support/errata/rhsa - 2005 - 582. - html MISC: SSA: 2005-310-04 URL: http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.600000 MISC: SSRT051128 URL: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828 MISC: SSRT051251 URL: http://www.securityfocus.com/archive/1/428138/100/0/threaded MISC: SUSE-SA: 2005:046 URL: http://www.novell.com/linux/security/advisories/2005_46_apache.html MISC: SUSE-SR: 2005:018 URL: http://www.novell.com/linux/security/advisories/2005_18_sr.html MISC: tslsa - 2005 - 0059 URL:~~http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html~~(过时的源-检查机器Wayback存档) MISC: usn - 160 - 2 URL: http://www.ubuntu.com/usn/usn——160 - 2 MISC (apache-httpd-announce): 20051014 Apache HTTP服务器2.0.55释放 URL: http://marc.info/?l=apache-httpd-announce&m=112931556417329&w=3 MISC (httpd-cvs): 20190815 svn提交:r1048742(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ vulnerabilities-httpd。xml安全/ vulnerabilities_13。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20190815 svn提交:r1048743(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ vulnerabilities-httpd。xml安全/ vulnerabilities_13。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20200401 svn提交:r1058586(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ vulnerabilities-httpd。xml安全/ vulnerabilities_13。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20200401 svn提交:r1058587(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ vulnerabilities-httpd。xml安全/ vulnerabilities_13。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073139[1/13]——在/网站/临时/ httpd /箱子/内容:/安全/ json / URL: https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073139[3/13]——在/网站/临时/ httpd /箱子/内容:/安全/ json / URL: https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073140(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ cvejsontohtml。py安全/ vulnerabilities_13。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073143(2/3)——/网站/临时/ httpd /箱子/内容:/安全/ URL: https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073149[1/13]——在/网站/临时/ httpd /箱子/内容:/安全/安全/ json / URL: https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1073149[4/13]——在/网站/临时/ httpd /箱子/内容:/安全/安全/ json / URL: https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210330 svn提交:r1888194 [3/13] - / httpd /网站/箱子/内容/安全/ json / URL: https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E MISC (httpd-cvs): 20210606 svn提交:r1075470(2/4)——/网站/临时/ httpd /箱子/内容:。/安全/ json / cve - 2020 - 13938。安全/ vulnerabilities_13 json。安全/ vulnerabilities_20 html。安全/ vulnerabilities_22 html。html安全/ vulnerabilities_24.html URL: https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E MISC: http://support.avaya.com/elmodocs2/security/asa - 2006 - 081. - htm URL: http://support.avaya.com/elmodocs2/security/asa - 2006 - 081. - htm MISC: http://www.apache.org/dist/httpd/CHANGES_1.3 URL: http://www.apache.org/dist/httpd/CHANGES_1.3 MISC: http://www.apache.org/dist/httpd/CHANGES_2.0 URL: http://www.apache.org/dist/httpd/CHANGES_2.0 MISC: http://www.securiteam.com/securityreviews/5GP0220G0U.html URL: http://www.securiteam.com/securityreviews/5GP0220G0U.html MISC: http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf URL: http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf MISC: https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html URL: https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html MISC:椭圆形:org.mitre.oval: def: 11452 URL: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11452 MISC:椭圆形:org.mitre.oval: def: 1237 URL: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1237 MISC:椭圆形:org.mitre.oval: def: 1526 URL: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1526 MISC:椭圆形:org.mitre.oval: def: 1629 URL: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1629 MISC:椭圆形:org.mitre.oval: def: 840 URL: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A840
分配中央社
红帽公司。
创建日期记录
20050630	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20050630)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2005 - 2088