5

CVE-2009-4086

Exploit
CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Javascript ≫ Xerver Http Server Version4.31
Javascript ≫ Xerver Http Server Version4.32
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.77% 0.907
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/36681
Vendor Advisory
http://packetstormsecurity.org/0911-exploits/xerver-split.txt
Exploit
http://www.securityfocus.com/bid/37064
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/54356