CVE-2006-1039

Description

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25003

http://www.vupen.com/english/advisories/2006/0810

http://www.securityfocus.com/bid/18006

http://www.securityfocus.com/archive/1/426449/100/0/threaded

http://securitytracker.com/id?1015702

http://secunia.com/advisories/19085

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS