CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3918

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.918

EPSS Ranking 99.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2006-3918

Apache » Http Server » Version: 1.3.10

cpe:2.3:a:apache:http_server:1.3.10
Apache » Http Server » Version: 1.3.11

cpe:2.3:a:apache:http_server:1.3.11
Apache » Http Server » Version: 1.3.12

cpe:2.3:a:apache:http_server:1.3.12
Apache » Http Server » Version: 1.3.13

cpe:2.3:a:apache:http_server:1.3.13
Apache » Http Server » Version: 1.3.14

cpe:2.3:a:apache:http_server:1.3.14
Apache » Http Server » Version: 1.3.15

cpe:2.3:a:apache:http_server:1.3.15
Apache » Http Server » Version: 1.3.16

cpe:2.3:a:apache:http_server:1.3.16
Apache » Http Server » Version: 1.3.17

cpe:2.3:a:apache:http_server:1.3.17
Apache » Http Server » Version: 1.3.18

cpe:2.3:a:apache:http_server:1.3.18
Apache » Http Server » Version: 1.3.19

cpe:2.3:a:apache:http_server:1.3.19
Apache » Http Server » Version: 1.3.20

cpe:2.3:a:apache:http_server:1.3.20
Apache » Http Server » Version: 1.3.22

cpe:2.3:a:apache:http_server:1.3.22
Apache » Http Server » Version: 1.3.23

cpe:2.3:a:apache:http_server:1.3.23
Apache » Http Server » Version: 1.3.24

cpe:2.3:a:apache:http_server:1.3.24
Apache » Http Server » Version: 1.3.25

cpe:2.3:a:apache:http_server:1.3.25
Apache » Http Server » Version: 1.3.26

cpe:2.3:a:apache:http_server:1.3.26
Apache » Http Server » Version: 1.3.27

cpe:2.3:a:apache:http_server:1.3.27
Apache » Http Server » Version: 1.3.28

cpe:2.3:a:apache:http_server:1.3.28
Apache » Http Server » Version: 1.3.29

cpe:2.3:a:apache:http_server:1.3.29
Apache » Http Server » Version: 1.3.3

cpe:2.3:a:apache:http_server:1.3.3
Apache » Http Server » Version: 1.3.30

cpe:2.3:a:apache:http_server:1.3.30
Apache » Http Server » Version: 1.3.31

cpe:2.3:a:apache:http_server:1.3.31
Apache » Http Server » Version: 1.3.32

cpe:2.3:a:apache:http_server:1.3.32
Apache » Http Server » Version: 1.3.33

cpe:2.3:a:apache:http_server:1.3.33
Apache » Http Server » Version: 1.3.34

cpe:2.3:a:apache:http_server:1.3.34
Apache » Http Server » Version: 1.3.4

cpe:2.3:a:apache:http_server:1.3.4
Apache » Http Server » Version: 1.3.5

cpe:2.3:a:apache:http_server:1.3.5
Apache » Http Server » Version: 1.3.6

cpe:2.3:a:apache:http_server:1.3.6
Apache » Http Server » Version: 1.3.7

cpe:2.3:a:apache:http_server:1.3.7
Apache » Http Server » Version: 1.3.8

cpe:2.3:a:apache:http_server:1.3.8
Apache » Http Server » Version: 1.3.9

cpe:2.3:a:apache:http_server:1.3.9
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 6.10

cpe:2.3:o:canonical:ubuntu_linux:6.10
Canonical » Ubuntu Linux » Version: 7.04

cpe:2.3:o:canonical:ubuntu_linux:7.04
Canonical » Ubuntu Linux » Version: 7.10

cpe:2.3:o:canonical:ubuntu_linux:7.10
Debian » Debian Linux » Version: 3.1

cpe:2.3:o:debian:debian_linux:3.1
Redhat » Enterprise Linux Server » Version: 2.0

cpe:2.3:o:redhat:enterprise_linux_server:2.0
Redhat » Enterprise Linux Workstation » Version: 2.0

cpe:2.3:o:redhat:enterprise_linux_workstation:2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3918

Products

Pricing

Contact Us