|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200411-35] phpWebSite: HTTP response splitting vulnerability Vulnerability Scan
Vulnerability Scan Summary
phpWebSite: HTTP response splitting vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200411-35
(phpWebSite: HTTP response splitting vulnerability)
Due to lack of proper input validation, phpWebSite has been found to be
vulnerable to HTTP response splitting attacks.
Impact
A malicious user could inject arbitrary response data, leading to
content spoofing, web cache poisoning and other cross-site scripting or
HTTP response splitting attacks. This could result in compromising the
victim's data or browser.
Workaround
There is no known workaround at this time.
References:
http://www.securityfocus.com/archive/1/380894
http://phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=863
Solution:
All phpWebSite users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/phpwebsite-0.9.3_p4-r2"
Threat Level: Low
Click HERE for more information and discussions on this network vulnerability scan.
|
