CGI Rescue Web Mailer HTTP Header Injection Vulnerability
BID:35047
Info
CGI Rescue Web Mailer HTTP Header Injection Vulnerability
| Bugtraq ID: | 35047 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1591 |
| Remote: | No |
| Local: | No |
| Published: | Feb 09 2009 12:00AM |
| Updated: | May 21 2009 08:30PM |
| Credit: | This issue was disclosed by the vendor. |
| Vulnerable: |
CGI RESCUE WEB Mailer 1.03 |
| Not Vulnerable: |
CGI RESCUE WEB Mailer 1.04 |
Discussion
CGI Rescue Web Mailer HTTP Header Injection Vulnerability
CGI Rescue Web Mailer is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input.
By inserting arbitrary headers into an HTTP response, attackers may be able to launch various attacks, including cross-site request forgery, cross-site scripting, and HTTP-request smuggling.
This issue affects versions prior to Web Mailer 1.04.
CGI Rescue Web Mailer is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input.
By inserting arbitrary headers into an HTTP response, attackers may be able to launch various attacks, including cross-site request forgery, cross-site scripting, and HTTP-request smuggling.
This issue affects versions prior to Web Mailer 1.04.
Exploit / POC
CGI Rescue Web Mailer HTTP Header Injection Vulnerability
Attackers may use common networking tools to exploit this issue. For some attacks, a vulnerable user may have to follow a malicious link.
Attackers may use common networking tools to exploit this issue. For some attacks, a vulnerable user may have to follow a malicious link.
Solution / Fix
CGI Rescue Web Mailer HTTP Header Injection Vulnerability
Solution:
Vendor fixes are available; please see the references for details.
Solution:
Vendor fixes are available; please see the references for details.
References
CGI Rescue Web Mailer HTTP Header Injection Vulnerability
References:
References: