.:[ packet storm ]:.
                               
trust nothing
trust nothing

 ///  File Name:MDVSA-2008-210-1.txt
Description:
Mandriva Linux Security Advisory - CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string. The updated packages have been patched to fix the issue. This update was too late for inclusion in Mandriva Linux 2009, so it is being released now for that version.
Homepage:http://www.mandriva.com/security/
File Size:5953
Related CVE(s):CVE-2008-3906
Last Modified:Oct 11 15:02:13 2008
MD5 Checksum:06dd87708ce37a3441979abe0dfdb2c1

 .:. Back