Lucene search

PRIOn knowledge basePRION:CVE-2007-2404

HistoryAug 03, 2007 - 10:17 a.m.

Crlf injection

2007-08-0310:17:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.4%

JSON

CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks.

CPENameOperatorVersion
mac_os_xeq10.4.3
mac_os_xeq10.3.1
mac_os_xeq10.3.5
mac_os_xeq10.4.1
mac_os_xeq10.4.10
mac_os_xeq10.4.9
mac_os_xeq10.4.7
mac_os_xeq10.4.4
mac_os_xeq10.3.2
mac_os_xeq10.3.7

Name	Operator	Version
mac_os_x	eq	10.4.3
mac_os_x	eq	10.3.1
mac_os_x	eq	10.3.5
mac_os_x	eq	10.4.1
mac_os_x	eq	10.4.10
mac_os_x	eq	10.4.9
mac_os_x	eq	10.4.7
mac_os_x	eq	10.4.4
mac_os_x	eq	10.3.2
mac_os_x	eq	10.3.7

Rows per page:

1-10 of 421

References

docs.info.apple.com/article.html?artnum=306172

lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

secunia.com/advisories/26235

securitytracker.com/id?1018491

www.securityfocus.com/bid/25159

www.vupen.com/english/advisories/2007/2732

exchange.xforce.ibmcloud.com/vulnerabilities/35723

5.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.4%

JSON

Related for PRION:CVE-2007-2404