Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/29/16

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/02/16

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Nov/12/15

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Jul/13/15

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/15/14

SunOS 5.10_x86: Apache 1.3 Patch.
Date this patch was last updated by Sun : Jul/11/13

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/29/16

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/02/16

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Nov/12/15

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Jul/13/15

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Mar/15/14

SunOS 5.10: Apache 1.3 Patch.
Date this patch was last updated by Sun : Jul/11/13

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities.  Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server

  - Apache mod_perl

  - Apache

  - AppKit

  - ATS

  - CFNetwork

  - CoreGraphics

  - CoreText

  - CUPS

  - Directory Services

  - diskdev_cmds

Disk Images

  - Flash Player plug-in

  - gzip

  - Image Capture

  - ImageIO

  - Image RAW

  - Kernel

  - MySQL

  - neon

  - Networking

  - OpenLDAP

  - OpenSSL

  - Password Server

  - PHP

  - Printing

  - python

  - QuickLook

  - QuickTime

  - Safari RSS

  - Time Machine

  - Wiki Server

  - X11

  - xar

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. 

This security update contains fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - ImageIO
  - Image RAW
  - MySQL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - Safari RSS
  - Wiki Server
  - X11

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.5.

Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - Apache
  - AppKit
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - Image Capture
  - ImageIO
  - Image RAW
  - Kernel
  - MySQL
  - neon
  - Networking
  - OpenLDAP
  - OpenSSL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - QuickTime
  - Safari RSS
  - Time Machine
  - Wiki Server
  - X11
  - xar

Secunia reports :

Certain input passed to the 'Apache::Status' and 'Apache2::Status' modules is not properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected website.

A vulnerability has been found and corrected in mod_perl v1.x and v2.x :

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI (CVE-2009-0796).

The updated packages have been patched to correct these issues.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

The remote web server contains an embedded Perl interpreter along with a version of Apache2::Status / Apache::Status that fails to sanitize the request URL before using it to generate dynamic HTML output.  An attacker may be able to leverage this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

ID	Name	Product	Family	Severity
107888	Solaris 10 (x86) : 122912-37	Nessus	Solaris Local Security Checks	medium
107887	Solaris 10 (x86) : 122912-36	Nessus	Solaris Local Security Checks	medium
107886	Solaris 10 (x86) : 122912-35	Nessus	Solaris Local Security Checks	medium
107885	Solaris 10 (x86) : 122912-34	Nessus	Solaris Local Security Checks	medium
107884	Solaris 10 (x86) : 122912-33	Nessus	Solaris Local Security Checks	medium
107883	Solaris 10 (x86) : 122912-32	Nessus	Solaris Local Security Checks	medium
107386	Solaris 10 (sparc) : 122911-37	Nessus	Solaris Local Security Checks	medium
107385	Solaris 10 (sparc) : 122911-36	Nessus	Solaris Local Security Checks	medium
107384	Solaris 10 (sparc) : 122911-35	Nessus	Solaris Local Security Checks	medium
107383	Solaris 10 (sparc) : 122911-34	Nessus	Solaris Local Security Checks	medium
107382	Solaris 10 (sparc) : 122911-33	Nessus	Solaris Local Security Checks	medium
107381	Solaris 10 (sparc) : 122911-32	Nessus	Solaris Local Security Checks	medium
5705	Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
50549	Mac OS X Multiple Vulnerabilities (Security Update 2010-007)	Nessus	MacOS X Local Security Checks	critical
50548	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
38802	FreeBSD : mod_perl -- XSS (4a638895-41b7-11de-b1cc-00219b0fc4d8)	Nessus	FreeBSD Local Security Checks	low
37785	Mandriva Linux Security Advisory : mod_perl (MDVSA-2009:091-1)	Nessus	Mandriva Local Security Checks	low
36101	mod_perl Apache::Status URI XSS	Nessus	Web Servers	low

Detections

Analytics

CVE-2009-0796

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

critical

critical

low

low

low