Multiple browsers digest authentication request splitting
Published:		28.04.2007
Source:		BUGTRAQ
SecurityVulns ID:		7643
Type:		client
Level:		5/10
Description:		It's possible to inject new line characters to HTTP request headers thorugh username.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MOZILLA : Firefox 2.0
		MICROSOFT : Windows Vista

Original document

Stefano Di Paola, IE 7 and Firefox Browsers Digest Authentication Request Splitting (28.04.2007)

Discuss:

Read or add your comments to this news (0 comments)