Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2006-3918
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-28 Jul, 2006 | 00:04
Updated At-03 Apr, 2025 | 01:03

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
The Apache Software Foundation
apache
>>http_server>>Versions from 1.3.3(inclusive) to 1.3.35(exclusive)
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
Debian GNU/Linux
debian
>>debian_linux>>3.1
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
Canonical Ltd.
canonical
>>ubuntu_linux>>6.06
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
Canonical Ltd.
canonical
>>ubuntu_linux>>6.10
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
Canonical Ltd.
canonical
>>ubuntu_linux>>7.04
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
Canonical Ltd.
canonical
>>ubuntu_linux>>7.10
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux_server>>2.0
cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux_workstation>>2.0
cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
Organization : Apache
Last Modified : 2008-07-02T00:00:00

Fixed in Apache HTTP Server 1.3.35: http://httpd.apache.org/security/vulnerabilities_13.html

References
HyperlinkSourceResource
ftp://patches.sgi.com/support/free/security/advisories/20060801-01-Pcve@mitre.org
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.htmlcve@mitre.org
Broken Link
Exploit
http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.htmlcve@mitre.org
Broken Link
Exploit
http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.htmlcve@mitre.org
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.htmlcve@mitre.org
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2cve@mitre.org
Issue Tracking
Mailing List
Third Party Advisory
http://openbsd.org/errata.html#httpd2cve@mitre.org
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0618.htmlcve@mitre.org
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0692.htmlcve@mitre.org
Third Party Advisory
http://secunia.com/advisories/21172cve@mitre.org
Not Applicable
Patch
Vendor Advisory
http://secunia.com/advisories/21174cve@mitre.org
Not Applicable
Patch
Vendor Advisory
http://secunia.com/advisories/21399cve@mitre.org
Not Applicable
http://secunia.com/advisories/21478cve@mitre.org
Not Applicable
http://secunia.com/advisories/21598cve@mitre.org
Not Applicable
http://secunia.com/advisories/21744cve@mitre.org
Not Applicable
http://secunia.com/advisories/21848cve@mitre.org
Not Applicable
http://secunia.com/advisories/21986cve@mitre.org
Not Applicable
http://secunia.com/advisories/22140cve@mitre.org
Not Applicable
http://secunia.com/advisories/22317cve@mitre.org
Not Applicable
http://secunia.com/advisories/22523cve@mitre.org
Not Applicable
http://secunia.com/advisories/28749cve@mitre.org
Not Applicable
http://secunia.com/advisories/29640cve@mitre.org
Not Applicable
http://secunia.com/advisories/40256cve@mitre.org
Not Applicable
http://securityreason.com/securityalert/1294cve@mitre.org
Exploit
Third Party Advisory
http://securitytracker.com/id?1016569cve@mitre.org
Broken Link
Third Party Advisory
VDB Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-194.htmcve@mitre.org
Third Party Advisory
http://svn.apache.org/viewvc?view=rev&revision=394965cve@mitre.org
Exploit
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631cve@mitre.org
Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24013080cve@mitre.org
Third Party Advisory
http://www.debian.org/security/2006/dsa-1167cve@mitre.org
Third Party Advisory
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.htmlcve@mitre.org
Third Party Advisory
http://www.novell.com/linux/security/advisories/2006_51_apache.htmlcve@mitre.org
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0619.htmlcve@mitre.org
Third Party Advisory
http://www.securityfocus.com/bid/19661cve@mitre.org
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024144cve@mitre.org
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-575-1cve@mitre.org
Third Party Advisory
http://www.vupen.com/english/advisories/2006/2963cve@mitre.org
Permissions Required
http://www.vupen.com/english/advisories/2006/2964cve@mitre.org
Permissions Required
http://www.vupen.com/english/advisories/2006/3264cve@mitre.org
Permissions Required
http://www.vupen.com/english/advisories/2006/4207cve@mitre.org
Permissions Required
http://www.vupen.com/english/advisories/2006/5089cve@mitre.org
Permissions Required
http://www.vupen.com/english/advisories/2010/1572cve@mitre.org
Permissions Required
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117cve@mitre.org
Broken Link
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ecve@mitre.org
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352cve@mitre.org
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238cve@mitre.org
Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060801-01-Paf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Exploit
http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Exploit
http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=129190899612998&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Mailing List
Third Party Advisory
http://openbsd.org/errata.html#httpd2af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0618.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2006-0692.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/21172af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Patch
Vendor Advisory
http://secunia.com/advisories/21174af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Patch
Vendor Advisory
http://secunia.com/advisories/21399af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21478af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21598af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21744af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21848af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/21986af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/22140af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/22317af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/22523af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/28749af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/29640af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/40256af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://securityreason.com/securityalert/1294af854a3a-2127-422b-91ae-364da2661108
Exploit
Third Party Advisory
http://securitytracker.com/id?1016569af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-194.htmaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://svn.apache.org/viewvc?view=rev&revision=394965af854a3a-2127-422b-91ae-364da2661108
Exploit
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24013080af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.debian.org/security/2006/dsa-1167af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.novell.com/linux/security/advisories/2006_51_apache.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0619.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/bid/19661af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024144af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-575-1af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2006/2963af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www.vupen.com/english/advisories/2006/2964af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www.vupen.com/english/advisories/2006/3264af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www.vupen.com/english/advisories/2006/4207af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www.vupen.com/english/advisories/2006/5089af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www.vupen.com/english/advisories/2010/1572af854a3a-2127-422b-91ae-364da2661108
Permissions Required
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Eaf854a3a-2127-422b-91ae-364da2661108
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Change History
0Changes found
Details not found