Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Varnish 安全漏洞
Vulnerability Description
Varnish（又名Varnish Cache）是丹麦软件开发者Poul-Henning Kamp所研发的一款高性能、开源的反向代理服务器和缓存服务器。该服务器通过采用Visual Page Cache技术，可实现所有缓存的数据直接从内存读取，从而提高访问速度。 Varnish 3.0.7之前3.x版本中存在安全漏洞。当程序用于堆安装时，远程攻击者可借助以‘ ’字符结尾的标题行和HTTP请求中的多个Content-Length头利用该漏洞注入任意HTTP头并实施HTTP响应拆分攻击。
CVSS Information
N/A
Vulnerability Type
N/A