CVE-2005-3348

Published: Nov 18, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

Affected (4)

Products: Phpsysinfo: Phpsysinfo

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Phpsysinfo Phpsysinfo	Version 2.0
Phpsysinfo Phpsysinfo	Version 2.1
Phpsysinfo Phpsysinfo	Version 2.3
Phpsysinfo Phpsysinfo	Version 2.4

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (34)

http://secunia.com/advisories/17441

Source: security@debian.org

http://secunia.com/advisories/17570

Source: security@debian.org

http://secunia.com/advisories/17584

Source: security@debian.org

http://secunia.com/advisories/17616

Source: security@debian.org

http://secunia.com/advisories/17620

Source: security@debian.org

http://secunia.com/advisories/17643

Source: security@debian.org

http://secunia.com/advisories/17698

Source: security@debian.org

http://www.debian.org/security/2005/dsa-897

Source: security@debian.org

http://www.debian.org/security/2005/dsa-898

Source: security@debian.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-899

Source: security@debian.org

http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml

Source: security@debian.org

http://www.hardened-php.net/advisory_212005.81.html

Source: security@debian.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:212

Source: security@debian.org

http://www.securityfocus.com/archive/1/416543

Source: security@debian.org

http://www.securityfocus.com/bid/15396

Source: security@debian.org

http://www.securityfocus.com/bid/15414

Source: security@debian.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23107

Source: security@debian.org

http://secunia.com/advisories/17441

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17570

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17584

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17616

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17620

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17643

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17698

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-897

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-898

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-899

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.hardened-php.net/advisory_212005.81.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:212

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/416543

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15396

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15414

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/23107

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.