SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-3918

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back…

MEDIUM 4.3EPSS 95.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 95.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

CVSS 2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
95.10% probability · 100th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
apache/http server · debian/debian linux · canonical/ubuntu linux · redhat/enterprise linux server · redhat/enterprise linux workstation
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.