Aruba Networks ArubaOS HTTP Response Splitting and HTML Injection Vulnerabilities

Bugtraq ID:	48614
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 07 2011 12:00AM
Updated:	Mar 19 2015 08:36AM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	Aruba Networks ArubaOS 3.4.1 .1 Aruba Networks ArubaOS 3.4.1 .0 Aruba Networks ArubaOS 3.4 .7 Aruba Networks ArubaOS 3.4 .3 Aruba Networks ArubaOS 3.4 .2 Aruba Networks ArubaOS 3.3.3 .2 Aruba Networks ArubaOS 3.3.3 .0 Aruba Networks ArubaOS 3.3.2 6 Aruba Networks ArubaOS 3.3.2 .23 Aruba Networks ArubaOS 3.3.2 .18 Aruba Networks ArubaOS 3.3.2 .17 Aruba Networks ArubaOS 3.3.2 .11 Aruba Networks ArubaOS 3.3.1 .30 Aruba Networks ArubaOS 3.3.1 .29 Aruba Networks ArubaOS 3.3.1 .24 Aruba Networks ArubaOS 3.3.1 Aruba Networks ArubaOS 6.0 Aruba Networks ArubaOS 5.0.3.0 Aruba Networks ArubaOS 5.0.2.1 Aruba Networks ArubaOS 5.0.2.0 Aruba Networks ArubaOS 5.0.0 Aruba Networks ArubaOS 3.4.3.1 Aruba Networks ArubaOS 3.4.3.1 Aruba Networks ArubaOS 3.4.2.6 Aruba Networks ArubaOS 3.4.2.3-FIPS Aruba Networks ArubaOS 3.4.2.0-FIPS Aruba Networks ArubaOS 3.4.2.0 Aruba Networks ArubaOS 3.3.3.9 Aruba Networks ArubaOS 3.3.3.8 Aruba Networks ArubaOS 3.3.2.8-rn-2.1_20469 Aruba Networks ArubaOS 3.3.2.20-FIPS Aruba Networks ArubaOS 3.3.2.14-FIPS Aruba Networks ArubaOS 3.3.2.13-FIPS Aruba Networks ArubaOS 3.3.2.0-FIPS Aruba Networks AirWave 7.2
Not Vulnerable:	Aruba Networks ArubaOS 6.0.1.1 Aruba Networks ArubaOS 5.0.3.2 Aruba Networks ArubaOS 3.4.4.2 Aruba Networks ArubaOS 3.4.4.0-FIPS Aruba Networks ArubaOS 3.3.3.10 Aruba Networks ArubaOS 3.3.2.21-FIPS Aruba Networks ArubaOS 2.4.8.27-FIPS Aruba Networks AirWave 7.2.2

Aruba Networks ArubaOS HTTP Response Splitting and HTML Injection Vulnerabilities

Solution:
Updates are available; please see the references for more information.