CVE:CVE-2005-3352
CNNVD:CNNVD-200512-244
Apache httpd 1.3.35-dev 之前版本和 Apache httpd 2.0.x 的 2.0.56-dev 之前版本的 mod_imap 模块中存在跨站脚本攻击漏洞，远程攻击者可以在使用图片映象时通过 Referer 注入任意 web 脚本或 HTML。
solution:Upgrade apache http_server to a higher version than 1.3,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.3.10,1.3.11,1.3.12,1.3.13,1.3.14,1.3.15,1.3.16,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.30,1.3.31,1.3.32,2.0,2.0.9,2.0.28,2.0.28:beta,2.0.32,2.0.32:beta,2.0.34:beta,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55,and avoid the version 1.3,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.3.10,1.3.11,1.3.12,1.3.13,1.3.14,1.3.15,1.3.16,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.30,1.3.31,1.3.32,2.0,2.0.9,2.0.28,2.0.28:beta,2.0.32,2.0.32:beta,2.0.34:beta,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55; Upgrade apache mod_imap to a higher version than *