NVD

Id
64837  
Name
CVE-2006-6276  
Description
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-04  
Modified Date
2011-03-07  
Seq
2006-6276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338554 64837 CVE-2006-6276 1017322  View
338555 64837 CVE-2006-6276 1017323  View
338556 64837 CVE-2006-6276 1017324  View
338557 64837 CVE-2006-6276 102733  View
338558 64837 CVE-2006-6276 21371  View
338559 64837 CVE-2006-6276 ADV-2006-4793  View
338560 64837 CVE-2006-6276 sunserver-proxy-csrf(30662)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58609 JVNDB-2006-000805 Sun Java System 製品の HTTP リクエスト分割攻撃に関する脆弱性 Sun Java System Proxy Server には、Sun Java System Application Server あるいは Sun Java System Web Server が共に利用されている場合、HTTP リクエスト分割 ( HTTP Request Smuggling) 攻撃を受ける脆弱性が存在します。 CVE-2006-6276 22378 CVE-2006-6276 64837 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000805.html 2006-11-30 2007-04-01 View