5

CVE-2010-3011

CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ System Management Homepage Version <= 6.1
Hp ≫ System Management Homepage Version 2.0.0
Hp ≫ System Management Homepage Version 2.0.1
Hp ≫ System Management Homepage Version 2.0.1.104
Hp ≫ System Management Homepage Version 2.0.2
Hp ≫ System Management Homepage Version 2.0.2.106
Hp ≫ System Management Homepage Version 2.1
Hp ≫ System Management Homepage Version 2.1.0-103
Hp ≫ System Management Homepage Version 2.1.0-109
Hp ≫ System Management Homepage Version 2.1.0-118
Hp ≫ System Management Homepage Version 2.1.0.121
Hp ≫ System Management Homepage Version 2.1.1
Hp ≫ System Management Homepage Version 2.1.2
Hp ≫ System Management Homepage Version 2.1.2-127
Hp ≫ System Management Homepage Version 2.1.2.127
Hp ≫ System Management Homepage Version 2.1.3
Hp ≫ System Management Homepage Version 2.1.3.132
Hp ≫ System Management Homepage Version 2.1.4
Hp ≫ System Management Homepage Version 2.1.4-143
Hp ≫ System Management Homepage Version 2.1.4.143
Hp ≫ System Management Homepage Version 2.1.5
Hp ≫ System Management Homepage Version 2.1.5-146
Hp ≫ System Management Homepage Version 2.1.5.146
Hp ≫ System Management Homepage Version 2.1.5.146 Update b
Hp ≫ System Management Homepage Version 2.1.6
Hp ≫ System Management Homepage Version 2.1.6-156
Hp ≫ System Management Homepage Version 2.1.6.156
Hp ≫ System Management Homepage Version 2.1.7
Hp ≫ System Management Homepage Version 2.1.7-168
Hp ≫ System Management Homepage Version 2.1.7.168
Hp ≫ System Management Homepage Version 2.1.8
Hp ≫ System Management Homepage Version 2.1.8-177
Hp ≫ System Management Homepage Version 2.1.8.179
Hp ≫ System Management Homepage Version 2.1.9
Hp ≫ System Management Homepage Version 2.1.9-178
Hp ≫ System Management Homepage Version 2.1.10
Hp ≫ System Management Homepage Version 2.1.10-186
Hp ≫ System Management Homepage Version 2.1.10.186
Hp ≫ System Management Homepage Version 2.1.10.186 Update b
Hp ≫ System Management Homepage Version 2.1.10.186 Update c
Hp ≫ System Management Homepage Version 2.1.11
Hp ≫ System Management Homepage Version 2.1.11-197
Hp ≫ System Management Homepage Version 2.1.11.197 Update a
Hp ≫ System Management Homepage Version 2.1.12-118
Hp ≫ System Management Homepage Version 2.1.12-200
Hp ≫ System Management Homepage Version 2.1.12.201
Hp ≫ System Management Homepage Version 2.1.14.20
Hp ≫ System Management Homepage Version 2.1.15-210
Hp ≫ System Management Homepage Version 2.1.15.210
Hp ≫ System Management Homepage Version 2.2.6
Hp ≫ System Management Homepage Version 2.2.8
Hp ≫ System Management Homepage Version 3.0.0-68
Hp ≫ System Management Homepage Version 3.0.0.64
Hp ≫ System Management Homepage Version 3.0.1-73
Hp ≫ System Management Homepage Version 3.0.1.73
Hp ≫ System Management Homepage Version 3.0.2-77
Hp ≫ System Management Homepage Version 3.0.2.77
Hp ≫ System Management Homepage Version 3.0.2.77 Update b
Hp ≫ System Management Homepage Version 6.0
Hp ≫ System Management Homepage Version 6.0.0-95
Hp ≫ System Management Homepage Version 6.0.0.96
Hp ≫ System Management Homepage Version 6.1.0-103
Hp ≫ System Management Homepage Version 6.1.0.102
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.53% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/41480
Vendor Advisory
http://secunia.com/advisories/41490
Vendor Advisory
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995