Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability
Publish Date: 21 Juli 2015
Schweregrad:: Niedrig
CVE Kennungen:: CVE-2009-0796
Hinweisdatum: 21 Juli 2015
Beschreibung
Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
Trend Micro Lösungen
Apply associated Trend Micro DPI Rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
Betroffene Software und Version:
- Apache Mod Perl 2
- Apache Mod Perl 1