Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
BID:59280
Info
Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
| Bugtraq ID: | 59280 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2582 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2013 12:00AM |
| Updated: | Mar 19 2015 09:24AM |
| Credit: | Martin Braun |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
Open-Xchange Server and OX App Suite are prone to a vulnerability that allows attackers to inject arbitrary HTTP headers.
A successful attack may allow attackers to insert arbitrary headers into an HTTP response, which may help them launch arbitrary code execution, HTTP-response-splitting, phishing, and other attacks.
Open-Xchange Server and OX App Suite are prone to a vulnerability that allows attackers to inject arbitrary HTTP headers.
A successful attack may allow attackers to insert arbitrary headers into an HTTP response, which may help them launch arbitrary code execution, HTTP-response-splitting, phishing, and other attacks.
Exploit / POC
Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Open-Xchange Server and OX App Suite CVE-2013-2582 HTTP Header Injection Vulnerability
References:
References: