Open-Xchange AppSuite CVE-2013-6009 HTTP Response Splitting Vulnerability

Bugtraq ID:	62974
Class:	Input Validation Error
CVE:	CVE-2013-6009
Remote:	Yes
Local:	No
Published:	Oct 03 2013 12:00AM
Updated:	Oct 03 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Open-Xchange Open-Xchange AppSuite 7.2.1 Open-Xchange Open-Xchange AppSuite 7.2 Open-Xchange Open-Xchange AppSuite 7.0.1 Open-Xchange Open-Xchange AppSuite 7.0 Open-Xchange Open-Xchange AppSuite 6.22.1 Open-Xchange Open-Xchange AppSuite 6.22 Open-Xchange Open-Xchange AppSuite 7.0.2-rev16 Open-Xchange Open-Xchange AppSuite 7.0.2-rev15
Not Vulnerable:	Open-Xchange Open-Xchange AppSuite 7.2.2

Open-Xchange AppSuite CVE-2013-6009 HTTP Response Splitting Vulnerability

Open-Xchange AppSuite is prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.

Open-Xchange AppSuite CVE-2013-6009 HTTP Response Splitting Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim into following a malicious URI.

Open-Xchange AppSuite CVE-2013-6009 HTTP Response Splitting Vulnerability

References:

• Open-Xchange AppSuite Homepage (Open-Xchange)
  
• Open-Xchange Homepage (Open-Xchange AG)