Lucene search
MitreCVELIST:CVE-2013-3373HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3373
2022-10-0316:14:46
mitre
www.cve.org
1
crlf injection
request tracker
remote attackers
http response splitting
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
References
lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html
lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html
lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html
secunia.com/advisories/53505
secunia.com/advisories/53522
www.debian.org/security/2012/dsa-2670
www.osvdb.org/93606
Related
cve
cve
CVE-2013-3373
2022-10-03 16:14:46
prion
prion
Crlf injection
2013-08-23 16:55:00
debiancve
debiancve
CVE-2013-3373
2022-10-03 16:14:46
nvd
nvd
CVE-2013-3373
2013-08-23 16:55:07
ubuntucve
ubuntucve
CVE-2013-3373
2013-08-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 2670-1 (request-tracker3.8 - several vulnerabilities)
2013-05-22 00:00:00
Debian: Security Advisory (DSA-2670-1)
2013-05-21 00:00:00
debian
debian
[SECURITY] [DSA 2670-1] request-tracker3.8 security update
2013-05-22 19:11:30
[SECURITY] [DSA 2670-1] request-tracker3.8 security update
2013-05-22 19:11:30
[SECURITY] [DSA 2671-1] request-tracker4 security update
2013-05-22 19:45:55
nessus
nessus
Debian DSA-2670-1 : request-tracker3.8 - several vulnerabilities
2013-05-23 00:00:00
Debian DSA-2671-1 : request-tracker4 - several vulnerabilities
2013-05-23 00:00:00
RT: Request Tracker < 3.8.17 / 4.0.13 Multiple Vulnerabilities
2013-05-24 00:00:00
osv
osv
request-tracker3.8 - several
2013-05-22 00:00:00
request-tracker4 - several
2013-05-22 00:00:00
freebsd
freebsd
RT -- multiple vulnerabilities
2013-05-22 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33