header-logo
Suggest Exploit
vendor:
OpenNMS
by:
SecurityFocus
7.5
CVSS
HIGH
HTTP Response-Splitting
20
CWE
Product Name: OpenNMS
Affected Version From: 1.5.94
Affected Version To: Prior versions
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

OpenNMS HTTP Response-Splitting Vulnerability

OpenNMS is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.

Mitigation:

Users should upgrade to the latest version of OpenNMS.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/31577/info

OpenNMS is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.

Versions prior to OpenNMS 1.5.94 are vulnerable. 

http://www.example.com/opennms/event/query?%0D%0AContent-Length:%200%0D%0A%0D%0AHTTP/1.1%20200%20OK%0D%0AContent-Type:%20text
/html%0D%0AContent-Length:%2036%0D%0A%0D%0A<html><body>BugSec</body></html><!--

Navigation

Suggest Exploit

Services By CQR