CVE-2007-4164 CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and es...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web server | = 6.1 | No fix listed |
| sun java system web server | = 6.1-sp1 | No fix listed |
| sun java system web server | = 6.1-sp2 | No fix listed |
| sun java system web server | = 6.1-sp3 | No fix listed |
| sun java system web server | = 6.1-sp4 | No fix listed |
| sun java system web server | = 6.1-sp5 | No fix listed |
| sun java system web server | = 6.1-sp6 | No fix listed |
| sun java system web server | = 6.1-sp7 | No fix listed |
| sun java system web server | = 7.0 | No fix listed |
References
- 26326 third-party-advisory vendor-advisory
- 103003 vendor-advisory
- 25190 patch vdb-entry
- 1018504 vdb-entry
- ADV-2007-2766 vdb-entry
- sun-redirect-response-splitting(35783) vdb-entry