CVE-2005-3352

State: Published
Severity: Not scored
Published: Dec 13, 2005
Updated: Aug 7, 2024
Reserved: Oct 27, 2005

Description

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

17319third-party-advisory
ADV-2006-3995vdb-entry
18526third-party-advisory
20046third-party-advisory
102662vendor-advisory
1015344vdb-entry
SSRT071293vendor-advisory
DSA-1167vendor-advisory
18339third-party-advisory
SSRT061265vendor-advisory
ADV-2006-4300vdb-entry
21744third-party-advisory
SUSE-SR:2006:004vendor-advisory
18340third-party-advisory
ADV-2008-1246vdb-entry
SSRT061269vendor-advisory
20670third-party-advisory
SSRT090208vendor-advisory
23260third-party-advisory
RHSA-2006:0159vendor-advisory
18008third-party-advisory
SUSE-SA:2006:043vendor-advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
ADV-2006-2423vdb-entry
ADV-2008-0924vdb-entry
MDKSA-2006:007vendor-advisory
29849third-party-advisory
18333third-party-advisory
ADV-2006-4015vdb-entry
USN-241-1vendor-advisory
TA08-150Athird-party-advisory
OpenPKG-SA-2005.029vendor-advisory
22368third-party-advisory
HPSBUX02145vendor-advisory
102663vendor-advisory
RHSA-2006:0158vendor-advisory
29420third-party-advisory
FLSA-2006:175406vendor-advisory
FEDORA-2006-052vendor-advisory
SUSE-SR:2007:011vendor-advisory
ADV-2006-4868vdb-entry
APPLE-SA-2008-03-18vendor-advisory
30430third-party-advisory
APPLE-SA-2008-05-28vendor-advisory
http://issues.apache.org/bugzilla/show_bug.cgi?id=37874
18517third-party-advisory
22669third-party-advisory
TSLSA-2005-0074vendor-advisory
SSA:2006-129-01vendor-advisory
PK16139vendor-advisory
oval:org.mitre.oval:def:10480vdb-entrysignature
RHSA-2006:0692vendor-advisory
18585third-party-advisory
http://docs.info.apple.com/article.html?artnum=307562
PK25355vendor-advisory
GLSA-200602-03vendor-advisory
ADV-2008-1697vdb-entry
19012third-party-advisory
18429third-party-advisory
15834vdb-entry
ADV-2005-2870vdb-entry
SSA:2006-130-01vendor-advisory
18743third-party-advisory
25239third-party-advisory
22140third-party-advisory
22388third-party-advisory
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/mailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.