Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Business_logic | Hitachi | 1.0 (including) | 1.0 (including) |
| Business_logic | Hitachi | 1.1 (including) | 1.1 (including) |
| Business_logic | Hitachi | 2.0 (including) | 2.0 (including) |
| Business_logic | Hitachi | 2.0.6 (including) | 2.0.6 (including) |
References
- http://secunia.com/advisories/18213
- http://securitytracker.com/id?1015420
- http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html
- http://www.osvdb.org/22064
- http://www.securityfocus.com/bid/16067
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23878
- http://secunia.com/advisories/18213
- http://securitytracker.com/id?1015420
- http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html
- http://www.osvdb.org/22064
- http://www.securityfocus.com/bid/16067
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23878