medium6.1
CVE-2016-6484
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo…
Impact
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infoblox | Netmri | through 7.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.html
- http://www.securityfocus.com/archive/1/539366/100/0/threaded
- http://www.securityfocus.com/bid/92794
- http://www.securitytracker.com/id/1036736
- http://packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.html
- http://www.securityfocus.com/archive/1/539366/100/0/threaded
- http://www.securityfocus.com/bid/92794
- http://www.securitytracker.com/id/1036736