CVE-2009-4086 CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the....
MediumCVSS 5.0
EPSS 4.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| javascript xerver http server | = 4.31 | No fix listed |
| javascript xerver http server | = 4.32 | No fix listed |
References
- packetstormsecurity.org exploit
- 36681 third-party-advisory vendor-advisory
- 37064 exploit vdb-entry
- xerver-response-splitting(54356) vdb-entry