CVE-2005-2088 The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XS...
MediumCVSS 4.3
EPSS 20.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | >= 2.0.35, < 2.0.55 | 2.0.55 |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian/apache2(Debian:12) | < 2.0.54-5 | 2.0.54-5 |
| debian/apache2(Debian:13) | < 2.0.54-5 | 2.0.54-5 |
| debian/apache2(Debian:14) | < 2.0.54-5 | 2.0.54-5 |
References
- APPLE-SA-2005-11-29 broken-link vendor-advisory
- TSLSA-2005-0059 broken-link vendor-advisory
- [apache-httpd-announce] 20051014 Apache HTTP Server 2.0.55 Released mailing-list third-party-advisory
- 20050606 A new whitepaper by Watchfire - HTTP Request Smuggling issue-tracking mailing-list third-party-advisory
- 14530 not-applicable third-party-advisory
- 17319 not-applicable third-party-advisory
- 17487 not-applicable third-party-advisory
- 17813 not-applicable third-party-advisory
- 19072 not-applicable third-party-advisory
- 19073 not-applicable third-party-advisory
- 19185 not-applicable third-party-advisory
- 19317 not-applicable third-party-advisory
- 23074 not-applicable third-party-advisory
- 604 exploit third-party-advisory
- 1014323 broken-link third-party-advisory vdb-entry
- SSA:2005-310-04 third-party-advisory vendor-advisory
- 102197 broken-link vendor-advisory
- 102198 broken-link vendor-advisory
- support.avaya.com third-party-advisory
- PK13959 broken-link third-party-advisory vendor-advisory
- PK16139 broken-link third-party-advisory vendor-advisory
- www.apache.org broken-link vendor-advisory
- www.apache.org broken-link vendor-advisory
- DSA-803 mailing-list third-party-advisory vendor-advisory
- DSA-805 mailing-list third-party-advisory vendor-advisory
- MDKSA-2005:130 third-party-advisory vendor-advisory
- SUSE-SR:2005:018 broken-link vendor-advisory
- SUSE-SA:2005:046 broken-link vendor-advisory
- RHSA-2005:582 broken-link third-party-advisory vendor-advisory
- www.securiteam.com broken-link exploit
- SSRT051251 broken-link third-party-advisory vdb-entry vendor-advisory
- 14106 broken-link third-party-advisory vdb-entry
- 15647 broken-link third-party-advisory vdb-entry
- USN-160-2 broken-link vendor-advisory
- ADV-2005-2140 broken-link permissions-required vdb-entry
- ADV-2005-2659 broken-link permissions-required vdb-entry
- ADV-2006-0789 broken-link permissions-required vdb-entry
- ADV-2006-1018 broken-link permissions-required vdb-entry
- ADV-2006-4680 broken-link permissions-required vdb-entry
- www.watchfire.com broken-link
- HPSBUX02101 broken-link vendor-advisory
- [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list vendor-advisory
- [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/ mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/ mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list vendor-advisory
- [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list vendor-advisory
- oval:org.mitre.oval:def:11452 broken-link signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1237 broken-link signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1526 broken-link signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1629 broken-link signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:840 broken-link signature third-party-advisory vdb-entry
- secure-support.novell.com broken-link
- Debian Security Tracker CVE-2005-2088 vendor-advisory
- bugs.debian.org issue-tracking