Internet Bug Bounty: mod_userdir CRLF injection (CVE-2016-4975)

🗓️ 13 Sep 2018 22:13:05Reported by bobrovType

hackerone

hackerone🔗 hackerone.com👁 400 Views

Possible CRLF injection allowing HTTP response splitting attacks for sites using mod_userdir. Mitigated in versions 2.4.25 and 2.2.32

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: Potential vulnerability in IBM HTTP Server (CVE-2016-8743)	8 Sep 202200:09	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect IBM Cognos Business Intelligence	24 Apr 201920:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller 2019Q2 Security Updater: Multiple vulnerabilities have been identified in IBM Cognos Controller	13 Jun 201919:15	–	ibm
Tenable Nessus	Apache 2.2.x < 2.2.32 Multiple Vulnerabilities (httpoxy)	12 Jan 201700:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.25 Multiple Vulnerabilities (httpoxy)	12 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 7 : httpd (CESA-2017:0906)	14 Apr 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : httpd (EulerOS-SA-2019-2402)	10 Dec 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2 (openSUSE-2018-1046)	27 Sep 201800:00	–	nessus
Tenable Nessus	RHEL 7 : httpd (RHSA-2017:0906)	13 Apr 201700:00	–	nessus

02 Oct 2018 05:49Current

7.4High risk

Vulners AI Score7.4

EPSS0.73272

$500

crlf injection http response splitting mod_userdir cve-2016-4975 apache 2.4.25 apache 2.2.32