← Back

CVE-2009-2823

nvd nist
Published: Nov 10, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.

Affected (118)

2 products
Mac Os X
Mac Os X Server
Configuration A
59 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Up to 10.6.1
Version 10.0.0
Version 10.0.1
Version 10.0.2
Version 10.0.3
Version 10.0.4
Version 10.0
Version 10.1.0
Version 10.1.1
Version 10.1.2
Version 10.1.3
Version 10.1.4
Version 10.1.5
Version 10.1
Version 10.2.0
Version 10.2.1
Version 10.2.2
Version 10.2.3
Version 10.2.4
Version 10.2.5
Version 10.2.6
Version 10.2.7
Version 10.2.8
Version 10.2
Version 10.3.0
Version 10.3.1
Version 10.3.2
Version 10.3.3
Version 10.3.4
Version 10.3.5
Version 10.3.6
Version 10.3.7
Version 10.3.8
Version 10.3.9
Version 10.3
Version 10.4.0
Version 10.4.10
Version 10.4.11
Version 10.4.1
Version 10.4.2
Version 10.4.3
Version 10.4.4
Version 10.4.5
Version 10.4.6
Version 10.4.7
Version 10.4.8
Version 10.4.9
Version 10.4
Version 10.5.0
Version 10.5.1
Version 10.5.2
Version 10.5.3
Version 10.5.4
Version 10.5.5
Version 10.5.6
Version 10.5.7
Version 10.5.8
Version 10.5
Version 10.6
Configuration B
59 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Up to 10.6.1
Version 10.0.0
Version 10.0.1
Version 10.0.2
Version 10.0.3
Version 10.0.4
Version 10.0
Version 10.1.0
Version 10.1.1
Version 10.1.2
Version 10.1.3
Version 10.1.4
Version 10.1.5
Version 10.1
Version 10.2.0
Version 10.2.1
Version 10.2.2
Version 10.2.3
Version 10.2.4
Version 10.2.5
Version 10.2.6
Version 10.2.7
Version 10.2.8
Version 10.2
Version 10.3.0
Version 10.3.1
Version 10.3.2
Version 10.3.3
Version 10.3.4
Version 10.3.5
Version 10.3.6
Version 10.3.7
Version 10.3.8
Version 10.3.9
Version 10.3
Version 10.4.0
Version 10.4.10
Version 10.4.11
Version 10.4.1
Version 10.4.2
Version 10.4.3
Version 10.4.4
Version 10.4.5
Version 10.4.6
Version 10.4.7
Version 10.4.8
Version 10.4.9
Version 10.4
Version 10.5.0
Version 10.5.1
Version 10.5.2
Version 10.5.3
Version 10.5.4
Version 10.5.5
Version 10.5.6
Version 10.5.7
Version 10.5.8
Version 10.5
Version 10.6

References (10)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.