4.3

CVE-2008-3906

Exploit
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mono ≫ Mono Version1.0
Mono ≫ Mono Version1.0.5
Mono ≫ Mono Version1.1.4
Mono ≫ Mono Version1.1.8.3
Mono ≫ Mono Version1.1.13
Mono ≫ Mono Version1.1.13.4
Mono ≫ Mono Version1.1.13.6
Mono ≫ Mono Version1.1.13.7
Mono ≫ Mono Version1.1.17
Mono ≫ Mono Version1.1.17.1
Mono ≫ Mono Version1.1.18
Mono ≫ Mono Version1.2.5.1
Mono Project ≫ Mono Version <= 2.0
Mono Project ≫ Mono Version1.2.1
Mono Project ≫ Mono Version1.2.2
Mono Project ≫ Mono Version1.2.3
Mono Project ≫ Mono Version1.2.4
Mono Project ≫ Mono Version1.2.5
Mono Project ≫ Mono Version1.2.6
Mono Project ≫ Mono Version1.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.1% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/36494
https://usn.ubuntu.com/826-1/
http://secunia.com/advisories/31643
Vendor Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286
http://www.mandriva.com/security/advisories?name=MDVSA-2008:210
http://www.openwall.com/lists/oss-security/2008/08/27/6
http://www.securityfocus.com/archive/1/496845/100/0/threaded
http://www.securityfocus.com/bid/30867
Exploit
http://www.vupen.com/english/advisories/2008/2443
https://bugzilla.novell.com/show_bug.cgi?id=418620
https://exchange.xforce.ibmcloud.com/vulnerabilities/44740