CVE-2010-0155: Code Injection
First published: Tue Sep 14 2010(Updated: )
CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Proventia Network Mail Security System Virtual Appliance | ||
| Ibm Proventia Network Mail Security System Virtual Appliance Firmware | =1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/last-modified-date
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm proventia network mail security system virtual appliance
- canonical/ibm proventia network mail security system virtual appliance firmware
- version/ibm proventia network mail security system virtual appliance firmware/1.6