Unscored CVE-2009-2823 EUVD-2009-2813GHSA-wrrr-43gq-gf8x

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site s…

Published Nov 10, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.

References

36956 vdb-entry
ADV-2009-3184 vdb-entry
APPLE-SA-2009-11-09-1 vendor-advisory
MDVSA-2009:300 vendor-advisory
http://support.apple.com/kb/HT3937