PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

Bugtraq ID:	15301
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 03 2005 12:00AM
Updated:	Nov 03 2005 12:00AM
Credit:	BiPi_HaCk and Nightmare TeAmZ are credited with the discovery of this vulnerability.
Vulnerable:	PHP Handicapper PHP Handicapper
Not Vulnerable:

PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

No exploit is required.

An example URI has been provided:

http://www.example.com/front/process_signup.php?login=[CRLF]

PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

References:

• PHP Handicapper Web Site (PHP Handicapper )