CVE:CVE-2008-2939
CNNVD:CNNVD-200808-056
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.0.63版本及之前版本、2.2版本至2.2.9之前版本存在跨站脚本漏洞。攻击者利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade apache http_server to a higher version than 2.0.63,-,2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6,2.2.8,2.2.9,and avoid the version (,2.0.63],2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6,2.2.8,2.2.9; Upgrade apple mac_os_x to a higher version than 10.5.6,and avoid the version (,10.5.6]; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.10,8.04,and avoid the version 6.06,7.10,8.04; Upgrade opensuse opensuse to a higher version than 10.2,10.3,11.0,and avoid the version 10.2,10.3,11.0