Multiple IBM Flex System Products CVE-2014-9564 HTTP Response Splitting Vulnerability
BID:74931
CVE-2014-9564 |Info
Multiple IBM Flex System Products CVE-2014-9564 HTTP Response Splitting Vulnerability
| Bugtraq ID: | 74931 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-9564 |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2015 12:00AM |
| Updated: | May 28 2015 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Flex System IB6131 40Gb Infiniband Switch 3.4 IBM Flex System EN6131 40Gb Ethernet Switch 3.4 |
| Not Vulnerable: |
IBM Flex System IB6131 40Gb Infiniband Switch 3.4.1110 IBM Flex System EN6131 40Gb Ethernet Switch 3.4.1110 |
Discussion
Multiple IBM Flex System Products CVE-2014-9564 HTTP Response Splitting Vulnerability
IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
Exploit / POC
Multiple IBM Flex System Products CVE-2014-9564 HTTP Response Splitting Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim into following a malicious URI.