CVE-2010-3913

CVE-2010-3913 affects TransWARE Active! mail 6 (build 6.40.010047750 and earlier). The vulnerability is a CRLF/HTTP header injection that can enable HTTP response splitting and allow remote attackers to inject headers. Documented impacts include falsified information being displayed and potential...

PT-2010-5164

Name of the Vulnerable Software and Affected Versions TransWARE Active! mail versions 6.40.010047750 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Recommendations For TransWARE Active! mail versions...

PT-2010-4616

Name of the Vulnerable Software and Affected Versions Bugzilla versions prior to 3.2.9 Bugzilla versions 3.4.x prior to 3.4.9 Bugzilla versions 3.6.x prior to 3.6.3 Bugzilla versions 4.0.x prior to 4.0rc1 Description The issue allows remote attackers to inject arbitrary HTTP headers and content,...

Bugzilla Response Splitting and Security Bypass Vulnerabilities

Bugzilla is prone to a response-splitting vulnerability and a security- bypass vulnerability. Successfully exploiting these issues may allow an attacker to bypass certain security restrictions; obtain sensitive information; and influence or misrepresent how web content is served, cached, or...

CVE-2010-3172: Improper Control of Generation of Code

CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted UR...

CVE-2010-3913: Improper Control of Generation of Code

CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Bugzilla Response Splitting and Security Bypass Vulnerabilities

Bugzilla is prone to a response-splitting vulnerability and a security- bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Security Advisory for Bugzilla 3.2.8, 3.4.8, 3.6.2, and 3.7.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: There is a way to inject both headers and content to users, causing a serious...

Paypal.com Cross Site Scripting

https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS | CAPEC-34 | CWE-79 Hoyt LLC - October 28, 2010 http://cloudscan.blogspot.com | http://cloudscan.me https://www.paypal.com | HTTP Header Injection | Cross Site Scripting XSS Tested on IE8, Chrome, Firefox. The affected URL'...

Oracle Java System Web Server HTTP Response Splitting Vulnerability

The host is running Oracle Java System Web Server and is prone to HTTP response splitting vulnerability. OpenVAS Vulnerability Test $Id: gboraclesjswebserverresponsesplittingvuln.nasl 5390 2017-02-21 18:39:27Z mime $ Oracle Java System Web Server HTTP Response Splitting Vulnerability Authors: Ant...

Oracle Java System Web Server HTTP Response Splitting Vulnerability - Active Check

Oracle Java System Web Server is prone to an HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability

Exploit for php platform in category web applications ================================================================== Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability ==================================================================...

JVN#72541530: Active! mail 6 vulnerable to HTTP header injection

Active! mail 6 from TransWARE Co. is a web-based email software. Active! mail 6 contains a HTTP header injection vulnerability. Impact Falsified information may be displayed or an arbitrary script may be executed on the user's web browser. HTTP response splitting attacks are also possible. Soluti...

[DSECRG-09-029] Oracle BI Publisher Enterprise 10 - Response Splitting

Digital Security Research Group DSecRG Advisory DSECRG-09-029 Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://oracle.com Bugs: Response Splitting/XSS/phishing credentials...

Oracle BI Publisher HTTP Response Splitting

Digital Security Research Group DSecRG Advisory DSECRG-09-029 Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://oracle.com Bugs: Response Splitting/XSS/phishing credentials...

Java Multiple Issues

Hi all and sorry for cross post, after several months since I contacted Oracle informing them about ten issues on Java applet security, they finally released an Java 6 update 22 which fixes several security issues In particular the issues are the following, sorted by impact: Information Disclosur...

Oracle Sun Java System Web Server - HTTP Response Splitting

Exploit for jsp platform in category web applications =========================================================== Oracle Sun Java System Web Server - HTTP Response Splitting =========================================================== Description Security-Assessment.com discovered that is possible...

OpenJDK HttpURLConnection request splitting (6952017)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

Oracle Sun Java System Web Server - HTTP Response Splitting

Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied input is used to generate the value of an HTTP header, as shown ...

Oracle Sun Java System Web Server - HTTP Response Splitting

Oracle Sun Java System Web Server - HTTP Response Splitting Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied inpu...