CVE-2010-3011: Input Validation
Published Sep 17, 2010
·Updated
CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected Software
64 affected components
HP System Management Homepage<=6.1
HP System Management Homepage=2.0.0
HP System Management Homepage=2.0.1
HP System Management Homepage=2.0.1.104
HP System Management Homepage=2.0.2
HP System Management Homepage=2.0.2.106
HP System Management Homepage=2.1
HP System Management Homepage=2.1.0-103
HP System Management Homepage=2.1.0-103\(a\)
HP System Management Homepage=2.1.0-109
HP System Management Homepage=2.1.0-118
HP System Management Homepage=2.1.0.121
HP System Management Homepage=2.1.1
HP System Management Homepage=2.1.2
HP System Management Homepage=2.1.2-127
HP System Management Homepage=2.1.2.127
HP System Management Homepage=2.1.3
HP System Management Homepage=2.1.3.132
HP System Management Homepage=2.1.4
HP System Management Homepage=2.1.4-143
HP System Management Homepage=2.1.4.143
HP System Management Homepage=2.1.5
HP System Management Homepage=2.1.5-146
HP System Management Homepage=2.1.5.146
HP System Management Homepage=2.1.5.146-b
HP System Management Homepage=2.1.6
HP System Management Homepage=2.1.6-156
HP System Management Homepage=2.1.6.156
HP System Management Homepage=2.1.7
HP System Management Homepage=2.1.7-168
HP System Management Homepage=2.1.7.168
HP System Management Homepage=2.1.8
HP System Management Homepage=2.1.8-177
HP System Management Homepage=2.1.8.179
HP System Management Homepage=2.1.9
HP System Management Homepage=2.1.9-178
HP System Management Homepage=2.1.10
HP System Management Homepage=2.1.10-186
HP System Management Homepage=2.1.10.186
HP System Management Homepage=2.1.10.186-b
HP System Management Homepage=2.1.10.186-c
HP System Management Homepage=2.1.11
HP System Management Homepage=2.1.11-197
HP System Management Homepage=2.1.11.197-a
HP System Management Homepage=2.1.12-118
HP System Management Homepage=2.1.12-200
HP System Management Homepage=2.1.12.201
HP System Management Homepage=2.1.14.20
HP System Management Homepage=2.1.15-210
HP System Management Homepage=2.1.15.210
HP System Management Homepage=2.2.6
HP System Management Homepage=2.2.8
HP System Management Homepage=3.0.0-68
HP System Management Homepage=3.0.0.64
HP System Management Homepage=3.0.1-73
HP System Management Homepage=3.0.1.73
HP System Management Homepage=3.0.2-77
HP System Management Homepage=3.0.2.77
HP System Management Homepage=3.0.2.77-b
HP System Management Homepage=6.0
HP System Management Homepage=6.0.0-95
HP System Management Homepage=6.0.0.96
HP System Management Homepage=6.1.0-103
HP System Management Homepage=6.1.0.102
Event History
Sep 17, 2010
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3011?
CVE-2010-3011 is classified as a medium severity vulnerability due to its potential for HTTP response splitting attacks.
2
How do I fix CVE-2010-3011?
To fix CVE-2010-3011, upgrade to HP System Management Homepage version 6.2 or later.
3
What types of attacks can CVE-2010-3011 lead to?
CVE-2010-3011 can lead to HTTP response splitting and arbitrary HTTP header injection attacks.
4
Which versions of HP System Management Homepage are affected by CVE-2010-3011?
Affected versions include all versions prior to 6.2 and specific versions like 2.1.9-178, 2.1.11.197-a, and 2.1.10.186.
5
Who can exploit CVE-2010-3011?
Remote attackers can exploit CVE-2010-3011 due to improper handling of CRLF sequences in HP System Management Homepage.