CVE-2009-0796
Summary
| CVE | CVE-2009-0796 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-07 23:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:H/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| mod_perl Input Validation Flaw in Apache::Status and Apache2::Status Permits Cross-Site Scripting Attacks - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| AWS, Azure, Managed Cloud & Security in Canada | Carbon60 | af854a3a-2127-422b-91ae-364da2661108 | www.gossamer-threads.com | Exploit |
| CVE-2009-0796 | af854a3a-2127-422b-91ae-364da2661108 | launchpad.net | |
| About the security content of Mac OS X v10.6.5 and Security Update 2010-007 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| APPLE-SA-2010-11-10-1 Mac OS X v10.6.5 and Security Update 2010-007 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| [Apache-SVN] Revision 761081 | af854a3a-2127-422b-91ae-364da2661108 | svn.apache.org | Patch, Vendor Advisory |
| [Apache-SVN] Diff of /perl/modperl/branches/1.x/lib/Apache/Status.pm | af854a3a-2127-422b-91ae-364da2661108 | svn.apache.org | |
| svn commit: r761081 - in /perl/modperl/branches/1.x: Changes lib/Apache/Status.pm | ModPerl | ModPerl-cvs | af854a3a-2127-422b-91ae-364da2661108 | www.gossamer-threads.com | Exploit |
| 494402 – (CVE-2009-0796) CVE-2009-0796 httpd mod_perl Apache::Status XSS flaw | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| sunsolve.sun.com/search/document.do | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Support / Security / Advisories / / MDVSA-2009:091 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Apache mod_perl "Apache::Status" / "Apache2::Status" Cross-Site Scripting - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| sunsolve.sun.com/search/document.do | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| CVE-2009-0796 - Red Hat Customer Portal | MITRE | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-06-11 | Tomas Hoger | Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0796 The Red Hat Security Response Team has rated this issue as having moderate security impact, a future mod_perl package update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/ |
There are currently no legacy QID mappings associated with this CVE.