NVD

Id
14590  
Name
CVE-2010-3172  
Description
CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-11-05  
Modified Date
2010-12-16  
Seq
2010-3172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80771 14590 CVE-2010-3172 FEDORA-2010-17280  View
80772 14590 CVE-2010-3172 FEDORA-2010-17274  View
80773 14590 CVE-2010-3172 FEDORA-2010-17235  View
80774 14590 CVE-2010-3172 http://www.bugzilla.org/security/3.2.8/  View
80775 14590 CVE-2010-3172 1024683  View
80776 14590 CVE-2010-3172 ADV-2010-2878  View
80777 14590 CVE-2010-3172 ADV-2010-2975  View
80778 14590 CVE-2010-3172 https://bugzilla.mozilla.org/show_bug.cgi?id=600464  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37243 JVNDB-2010-003028 Bugzilla における CRLF インジェクションの脆弱性 Bugzilla には、Server Push が Web ブラウザ内で有効な際、CRLF インジェクションの脆弱性が存在します。 CVE-2010-3172 45752 CVE-2010-3172 14590 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003028.html 2010-11-05 2012-03-27 View