The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2012-06-27T10:00:00
Updated: 2024-08-07T00:23:39.213Z
Reserved: 2011-12-23T00:00:00
Link: CVE-2011-4940
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-06-27T10:18:36.433
Modified: 2024-11-21T01:33:20.067
Link: CVE-2011-4940
Redhat