CVE-2005-3348

2005-11-1800:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.4%

JSON

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and
earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before
1.0.0.009, allows remote attackers to spoof web content and poison web
caches via CRLF sequences in the charset parameter.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchegroupware< 1.0.0.009.dfsg-3-4UNKNOWN
ubuntu6.10noarchegroupware< 1.0.0.009.dfsg-3-4UNKNOWN
ubuntu7.04noarchegroupware< 1.0.0.009.dfsg-3-4UNKNOWN
ubuntu6.06noarchphpgroupware< 0.9.16.010-1UNKNOWN
ubuntu6.10noarchphpgroupware< 0.9.16.010-1UNKNOWN
ubuntu7.04noarchphpgroupware< 0.9.16.010-1UNKNOWN
ubuntu6.06noarchphpsysinfo< 2.3-7UNKNOWN
ubuntu6.10noarchphpsysinfo< 2.3-7UNKNOWN
ubuntu7.04noarchphpsysinfo< 2.3-7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	egroupware	< 1.0.0.009.dfsg-3-4	UNKNOWN
ubuntu	6.10	noarch	egroupware	< 1.0.0.009.dfsg-3-4	UNKNOWN
ubuntu	7.04	noarch	egroupware	< 1.0.0.009.dfsg-3-4	UNKNOWN
ubuntu	6.06	noarch	phpgroupware	< 0.9.16.010-1	UNKNOWN
ubuntu	6.10	noarch	phpgroupware	< 0.9.16.010-1	UNKNOWN
ubuntu	7.04	noarch	phpgroupware	< 0.9.16.010-1	UNKNOWN
ubuntu	6.06	noarch	phpsysinfo	< 2.3-7	UNKNOWN
ubuntu	6.10	noarch	phpsysinfo	< 2.3-7	UNKNOWN
ubuntu	7.04	noarch	phpsysinfo	< 2.3-7	UNKNOWN