CVE-2009-1357

CVE-2009-1357 describes a CRLF injection/HTTP response splitting vulnerability in Sun Java System Delegated Administrator (DA) server. Affected are DA 6.2–6.4 (without patches 121581-20 / 121582-20 / 121583-20 depending on platform). The issue arises in the da/DA/Login component via the HELP_PAGE...