NVD

Id
48643  
Name
CVE-2009-1357  
Description
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-23  
Modified Date
2010-06-02  
Seq
2009-1357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245524 48643 CVE-2009-1357 1022108  View
245525 48643 CVE-2009-1357 http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1  View
245526 48643 CVE-2009-1357 255928  View
245527 48643 CVE-2009-1357 1020305  View
245528 48643 CVE-2009-1357 http://www.coresecurity.com/content/sun-delegated-administrator  View
245529 48643 CVE-2009-1357 20090421 CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator  View
245530 48643 CVE-2009-1357 34643  View
245531 48643 CVE-2009-1357 ADV-2009-1122  View
245532 48643 CVE-2009-1357 sjs-delegated-login-response-splitting(50004)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44943 JVNDB-2009-005950 Sun Java System Delegated Administrator の da/DA/Login における CRLF インジェクションの脆弱性 Sun Java System Delegated Administrator の da/DA/Login には、CRLF インジェクションの脆弱性が存在します。 CVE-2009-1357 38788 CVE-2009-1357 48643 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005950.html 2009-04-21 2012-12-20 View