Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-3906HistorySep 04, 2008 - 5:41 p.m.
CVE-2008-3906
2008-09-0417:41:00
Debian Security Bug Tracker
security-tracker.debian.org
6
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.5%
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mono | < 1.9.1+dfsg-4 | mono_1.9.1+dfsg-4_all.deb |
| Debian | 11 | all | mono | < 1.9.1+dfsg-4 | mono_1.9.1+dfsg-4_all.deb |
| Debian | 10 | all | mono | < 1.9.1+dfsg-4 | mono_1.9.1+dfsg-4_all.deb |
| Debian | 999 | all | mono | < 1.9.1+dfsg-4 | mono_1.9.1+dfsg-4_all.deb |
| Debian | 13 | all | mono | < 1.9.1+dfsg-4 | mono_1.9.1+dfsg-4_all.deb |
Related
openvas
openvas
Mandriva Update for mono MDVSA-2008:210 (mono)
2009-04-09 00:00:00
Mandriva Update for mono MDVSA-2008:210-1 (mono)
2009-04-09 00:00:00
Mandriva Update for mono MDVSA-2008:210 (mono)
2009-04-09 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mono (MDVSA-2008:210-1)
2009-04-23 00:00:00
Ubuntu 8.04 LTS / 8.10 / 9.04 : mono vulnerabilities (USN-826-1)
2009-08-27 00:00:00
Mandriva Linux Security Advisory : mono (MDVSA-2009:322)
2009-12-08 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-10-02 00:00:00
rPSA-2008-0286-1 mono
2008-10-02 00:00:00
cve
cve
CVE-2008-3906
2008-09-04 17:41:00
ubuntucve
ubuntucve
CVE-2008-3906
2008-09-04 00:00:00
redhatcve
redhatcve
CVE-2008-3906
2019-10-04 20:27:58
prion
prion
Crlf injection
2008-09-04 17:41:00
debian
debian
[Backports-security-announce] Security Update for mono
2008-10-22 08:35:54
[Backports-security-announce] Security Update for mono
2008-10-22 08:50:59
ubuntu
ubuntu
Mono vulnerabilities
2009-08-26 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.5%
Related for DEBIANCVE:CVE-2008-3906