CVE-2005-3348 - Vulnerability Details - OpenCVE

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Phpsysinfo	Phpsysinfo

Configuration 1 [-]

OR	cpe:2.3:a:phpsysinfo:phpsysinfo:2.0:::::::*
	cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:::::::*
	cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:::::::*
	cpe:2.3:a:phpsysinfo:phpsysinfo:2.4:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/17441
http://secunia.com/advisories/17570
http://secunia.com/advisories/17584
http://secunia.com/advisories/17616
http://secunia.com/advisories/17620
http://secunia.com/advisories/17643
http://secunia.com/advisories/17698
http://www.debian.org/security/2005/dsa-897
http://www.debian.org/security/2005/dsa-898
http://www.debian.org/security/2005/dsa-899
http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml
http://www.hardened-php.net/advisory_212005.81.html
http://www.mandriva.com/security/advisories?name=MDKSA-2005:212
http://www.securityfocus.com/archive/1/416543
http://www.securityfocus.com/bid/15396
http://www.securityfocus.com/bid/15414
https://exchange.xforce.ibmcloud.com/vulnerabilities/23107

History

No history.

MITRE

Status: PUBLISHED

Assigner: debian

Published: 2005-11-18T02:00:00

Updated: 2024-08-07T23:10:08.487Z

Reserved: 2005-10-27T00:00:00

Link: CVE-2005-3348

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-11-18T02:02:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-3348

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-17T00:00:00", "descriptions": [{"lang": "en", "value": "HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "17616", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17616"}, {"name": "MDKSA-2005:212", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212"}, {"name": "15396", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15396"}, {"name": "GLSA-200511-18", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml"}, {"name": "15414", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15414"}, {"name": "17698", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17698"}, {"name": "DSA-898", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-898"}, {"name": "17441", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17441"}, {"name": "20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/416543"}, {"name": "DSA-897", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-897"}, {"name": "17620", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17620"}, {"name": "17584", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17584"}, {"tags": ["x_refsource_MISC"], "url": "http://www.hardened-php.net/advisory_212005.81.html"}, {"name": "17570", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17570"}, {"name": "DSA-899", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-899"}, {"name": "17643", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17643"}, {"name": "phpsysinfo-registerglobal-data-manipulation(23107)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2005-3348", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "17616", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17616"}, {"name": "MDKSA-2005:212", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212"}, {"name": "15396", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15396"}, {"name": "GLSA-200511-18", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml"}, {"name": "15414", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15414"}, {"name": "17698", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17698"}, {"name": "DSA-898", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-898"}, {"name": "17441", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17441"}, {"name": "20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/416543"}, {"name": "DSA-897", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-897"}, {"name": "17620", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17620"}, {"name": "17584", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17584"}, {"name": "http://www.hardened-php.net/advisory_212005.81.html", "refsource": "MISC", "url": "http://www.hardened-php.net/advisory_212005.81.html"}, {"name": "17570", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17570"}, {"name": "DSA-899", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-899"}, {"name": "17643", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17643"}, {"name": "phpsysinfo-registerglobal-data-manipulation(23107)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:10:08.487Z"}, "title": "CVE Program Container", "references": [{"name": "17616", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17616"}, {"name": "MDKSA-2005:212", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212"}, {"name": "15396", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15396"}, {"name": "GLSA-200511-18", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml"}, {"name": "15414", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15414"}, {"name": "17698", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17698"}, {"name": "DSA-898", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-898"}, {"name": "17441", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17441"}, {"name": "20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/416543"}, {"name": "DSA-897", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-897"}, {"name": "17620", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17620"}, {"name": "17584", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17584"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.hardened-php.net/advisory_212005.81.html"}, {"name": "17570", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17570"}, {"name": "DSA-899", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-899"}, {"name": "17643", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17643"}, {"name": "phpsysinfo-registerglobal-data-manipulation(23107)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2005-3348", "datePublished": "2005-11-18T02:00:00", "dateReserved": "2005-10-27T00:00:00", "dateUpdated": "2024-08-07T23:10:08.487Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpsysinfo:phpsysinfo:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "AD2A6B77-B7B5-46E3-A8E4-B689CB7E6723", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "F99B269E-1C24-45F7-8B35-E24D462CFE60", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "CE3AC363-8AE4-493D-8FDB-A8CBE03AD389", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpsysinfo:phpsysinfo:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "16643FCE-2156-4FF7-89CF-652F40648602", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter."}], "id": "CVE-2005-3348", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2005-11-18T02:02:00.000", "references": [{"source": "security@debian.org", "url": "http://secunia.com/advisories/17441"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17570"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17584"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17616"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17620"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17643"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/17698"}, {"source": "security@debian.org", "url": "http://www.debian.org/security/2005/dsa-897"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2005/dsa-898"}, {"source": "security@debian.org", "url": "http://www.debian.org/security/2005/dsa-899"}, {"source": "security@debian.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml"}, {"source": "security@debian.org", "url": "http://www.hardened-php.net/advisory_212005.81.html"}, {"source": "security@debian.org", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212"}, {"source": "security@debian.org", "url": "http://www.securityfocus.com/archive/1/416543"}, {"source": "security@debian.org", "url": "http://www.securityfocus.com/bid/15396"}, {"source": "security@debian.org", "url": "http://www.securityfocus.com/bid/15414"}, {"source": "security@debian.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17441"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17570"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17584"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17616"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17620"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17643"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17698"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2005/dsa-897"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2005/dsa-898"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2005/dsa-899"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.hardened-php.net/advisory_212005.81.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:212"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/416543"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15396"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15414"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23107"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}