What is the severity of CVE-2013-1647?

CVE-2013-1647 has been rated as Medium severity due to the potential for unauthorized HTTP header injection and HTTP response splitting attacks.

Which versions of Open-Xchange are affected by CVE-2013-1647?

CVE-2013-1647 affects Open-Xchange Server versions prior to 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14.

How do I fix CVE-2013-1647?

To fix CVE-2013-1647, you should upgrade Open-Xchange Server to the latest version that includes the security patches addressing the vulnerability.

What types of attacks can be conducted using CVE-2013-1647?

CVE-2013-1647 allows remote attackers to conduct HTTP response splitting attacks by injecting arbitrary HTTP headers.

Is there any workaround for CVE-2013-1647?

There are no specific workarounds for CVE-2013-1647, so applying the appropriate security updates is strongly recommended.

Vulnerability/
CVE-2013-1647

medium

CWE

94 93

5/9/2013

3/10/2022

6/8/2024

CVE-2013-1647: Code Injection

First published: Thu Sep 05 2013(Updated: )

Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter, as demonstrated by (1) the location parameter to ajax/redirect or (2) multiple infostore URIs.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
SUSE Linux Openexchange Server	=6.20.7
SUSE Linux Openexchange Server	=6.22.0
SUSE Linux Openexchange Server	=6.22.1

Never miss a vulnerability like this again

Reference Links

http://archives.neohapsis.com/archives/bugtraq/2013-03/0075.html

Frequently Asked Questions

What is the severity of CVE-2013-1647?
CVE-2013-1647 has been rated as Medium severity due to the potential for unauthorized HTTP header injection and HTTP response splitting attacks.
Which versions of Open-Xchange are affected by CVE-2013-1647?
CVE-2013-1647 affects Open-Xchange Server versions prior to 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14.
How do I fix CVE-2013-1647?
To fix CVE-2013-1647, you should upgrade Open-Xchange Server to the latest version that includes the security patches addressing the vulnerability.
What types of attacks can be conducted using CVE-2013-1647?
CVE-2013-1647 allows remote attackers to conduct HTTP response splitting attacks by injecting arbitrary HTTP headers.
Is there any workaround for CVE-2013-1647?
There are no specific workarounds for CVE-2013-1647, so applying the appropriate security updates is strongly recommended.

agent/weakness
agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/author
agent/references
agent/softwarecombine
agent/event
agent/description
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/open-xchange
canonical/suse linux openexchange server
version/suse linux openexchange server/6.20.7
version/suse linux openexchange server/6.22.0
version/suse linux openexchange server/6.22.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.