CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-09-14T16:39:00
Updated: 2024-08-07T00:37:54.114Z
Reserved: 2010-01-04T00:00:00
Link: CVE-2010-0155
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-09-14T17:00:01.480
Modified: 2018-10-10T19:51:12.930
Link: CVE-2010-0155
Redhat
No data.