Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3913
cve-2010-3913
crlf injection
transware active! mail
remote attackers
http headers
http response splitting
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
Node
transwareactive\!_mailRange≤6.40.010047750
| CPE | Name | Operator | Version |
|---|---|---|---|
| transware:active\!_mail | transware active! mail | le | 6.40.010047750 |
Related
cvelist
cvelist
CVE-2010-3913
2022-10-03 16:20:55
nvd
nvd
CVE-2010-3913
2010-11-05 17:00:02
jvn
jvn
JVN#72541530: Active! mail 6 vulnerable to HTTP header injection
2010-10-29 00:00:00
prion
prion
Crlf injection
2010-11-05 17:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
Related for CVE-2010-3913