TeamSHATTER Security Advisory: HTTP Response Splitting in Oracle EM (policyViewSettings) (CVE-2013-0354)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory HTTP Response Splitting in Oracle Enterprise Manager policyViewSettings February 20, 2013 Risk Level: Medium Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote exploitable: Y...

CVE-2013-0354

CVE-2013-0354 affects Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 11.1.0.7, 11.2.0.2, 11.2.0.3. The TeamSHATTER advisory documents a HTTP Response Splitting vulnerability in policyViewSettings that is remotely exploitable; an attacker convincing a valid user...