Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java System Delegated Administrator 'DA/Login'HTTP响应拆分漏洞
Vulnerability Description
Delegated Administrator允许在Sun Java通讯套件(如Messaging Server和Calendar Server)使用的LDAP目录中置备组织(域)、用户、组和资源。 Delegated Administrator的/da/DA/Login文件没有正确的过滤HELP_PAGE参数输入便返回给了用户。远程攻击者可以在提交的请求中包含任意HTTP头，该头会在响应中发送给用户，导致在用户浏览器会话中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A