Active! Mail HTTP Header Injection Vulnerability
BID:44540
Info
Active! Mail HTTP Header Injection Vulnerability
| Bugtraq ID: | 44540 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3913 |
| Remote: | No |
| Local: | No |
| Published: | Oct 29 2010 12:00AM |
| Updated: | Oct 29 2010 12:00AM |
| Credit: | Taketo Ikeuchi of Hitachi Solutions |
| Vulnerable: |
Transware Active! Mail 2.0.1 .1 Transware Active! Mail 2.0 Transware Active! Mail 1.422 Transware Active! Mail 6.40.010047750 Transware Active! Mail 6 |
| Not Vulnerable: |
Transware Active! Mail 6.40.02004975 |
Discussion
Active! Mail HTTP Header Injection Vulnerability
Active! Mail is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input before using them in HTTP responses.
By inserting arbitrary headers into an HTTP response, attackers may be able to redirect users to arbitrary sites and perform HTTP-request smuggling. Other attacks are also possible.
Active! Mail 6.40.010047750 and prior are vulnerable.
Active! Mail is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input before using them in HTTP responses.
By inserting arbitrary headers into an HTTP response, attackers may be able to redirect users to arbitrary sites and perform HTTP-request smuggling. Other attacks are also possible.
Active! Mail 6.40.010047750 and prior are vulnerable.
Exploit / POC
Active! Mail HTTP Header Injection Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Active! Mail HTTP Header Injection Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Active! Mail HTTP Header Injection Vulnerability
References:
References: