CVE

Id
13300  
CVE No.
CVE-2005-2094  
Status
Candidate  
Description
Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."  
Phase
Assigned (20050630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96027 13300 CVE-2005-2094 BUGTRAQ:20050606 A new whitepaper by Watchfire - HTTP Request Smuggling  View
96028 13300 CVE-2005-2094 URL:http://seclists.org/lists/bugtraq/2005/Jun/0025.html  View
96029 13300 CVE-2005-2094 MISC:http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf  View
96030 13300 CVE-2005-2094 MISC:http://www.securiteam.com/securityreviews/5GP0220G0U.html  View
96031 13300 CVE-2005-2094 SECTRACK:1014369  View
96032 13300 CVE-2005-2094 URL:http://securitytracker.com/id?1014369  View
96033 13300 CVE-2005-2094 XF:sun-sunone-hrs(42903)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62216 JVNDB-2005-000418 データ圧縮ライブラリ zlib におけるバッファーオーバーフローの脆弱性 データ圧縮ライブラリとして広く利用されている zlib において、バッファーオーバーフローが発生する脆弱性が存在します。 CVE-2005-2096 13300 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000418.html  View