[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] NetCat CMS Multiple HTTP Response Splitting (CRLF) Security Vulnerabilities - CVE Req
From:       Jing Wang <justqdjing () gmail ! com>
Date:       2015-05-04 7:31:02
Message-ID: CAFWG0-hyKnOmmiNO-MGR2DkifuOFKvNh=wQ0Q243S3cgK3UdRw () mail ! gmail ! com
[Download RAW message or body]


Hello,

Could you assign a CVE reference ID for the following vulnerability?
Thank you very much.

http://seclists.org/fulldisclosure/2015/Mar/36
http://packetstormsecurity.com/files/130721/NetCat-CMS-5.01-Header-Injection.html
http://www.osvdb.org/show/osvdb/119342
http://www.osvdb.org/show/osvdb/119343
http://tetraph.com/security/http-response-splitting-vulnerability/netcat-cms-multiple-http-response-splitting-crlf-security-vulnerabilities/




========

Exploit Title:
NetCat CMS Multiple CRLF Web Security Vulnerabilities

Product:
NetCat

Vendor:
NetCat

Vendor Link:
http://netcat.ru/

Vulnerable Versions:
 5.01   3.12   3.0   2.4   2.3   2.2   2.1   2.0   1.1

Tested Versions:
3.12

========

Best Regards,
Wang Jing



[prev in list] [next in list] [prev in thread] [next in thread]