blob: c1e3122afaf1ce926db363799add8c02c8e07a84 [file] [log] [blame]
<?xml version="1.0" encoding="utf-8"?>
<glsa id="200409-23">
<title>SnipSnap: HTTP response splitting</title>
SnipSnap is vulnerable to HTTP response splitting attacks such as web cache
poisoning, cross-user defacement, and cross-site scripting.
<product type="ebuild">snipsnap</product>
<announced>September 17, 2004</announced>
<revised>May 22, 2006: 02</revised>
<package name="dev-java/snipsnap-bin" auto="yes" arch="*">
<unaffected range="ge">1.0_beta1</unaffected>
<vulnerable range="lt">1.0_beta1</vulnerable>
SnipSnap is a user friendly content management system with features
such as wiki and weblog.
SnipSnap contains various HTTP response splitting vulnerabilities that
could potentially compromise the sites data. Some of these attacks
include web cache poisoning, cross-user defacement, hijacking pages
with sensitive user information, and cross-site scripting. This
vulnerability is due to the lack of illegal input checking in the
<impact type="low">
A malicious user could inject and execute arbitrary script code,
potentially compromising the victim's data or browser.
There is no known workaround at this time.
All SnipSnap users should upgrade to the latest version:
# emerge sync
# emerge -pv &quot;&gt;=dev-java/snipsnap-bin-1.0_beta1&quot;
# emerge &quot;&gt;=dev-java/snipsnap-bin-1.0beta1&quot;</code>
<uri link="">SnipSnap Release Notes</uri>
<uri link="">CVE-2004-1470</uri>
<metadata tag="submitter" timestamp="Thu, 16 Sep 2004 20:00:37 +0000">
<metadata tag="bugReady" timestamp="Thu, 16 Sep 2004 20:40:46 +0000">