medium5.0
CVE-2005-3633
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML he…
Impact
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Sap Web Application Server | Versions 6.10, 6.20, 6.40, 7.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=113156438708932&w=2
- http://secunia.com/advisories/17515/
- http://securityreason.com/securityalert/164
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_HTTP_Response_Splitting_in_SAP_WAS.pdf
- http://www.osvdb.org/20714
- http://www.securityfocus.com/bid/15360/
- http://www.securitytracker.com/alerts/2005/Nov/1015174.html
- http://www.vupen.com/english/advisories/2005/2361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23030
- http://marc.info/?l=bugtraq&m=113156438708932&w=2
- http://secunia.com/advisories/17515/
- http://securityreason.com/securityalert/164
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_HTTP_Response_Splitting_in_SAP_WAS.pdf
- http://www.osvdb.org/20714
- http://www.securityfocus.com/bid/15360/
- http://www.securitytracker.com/alerts/2005/Nov/1015174.html
- http://www.vupen.com/english/advisories/2005/2361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23030