CVE-2005-3348
Last modified
CVE-2005-3348 is a vulnerability of currently unknown severity. HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.. EPSS estimates a 1.98% chance of exploitation in the next 30 days.
Description
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpsysinfo | Phpsysinfo | 2.0 |
| Phpsysinfo | Phpsysinfo | 2.1 |
| Phpsysinfo | Phpsysinfo | 2.3 |
| Phpsysinfo | Phpsysinfo | 2.4 |
References
- http://www.debian.org/security/2005/dsa-898Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-898Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3348?
How severe is CVE-2005-3348?
How do I fix CVE-2005-3348?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3342noweb 2.10c and earlier allows local users to overwrite arbi…
- CVE-2005-3343tkdiff before 4.1.1 allows local users to overwrite arbitrar…
- CVE-2005-3344The default installation of Horde 3.0.4 contains an administ…
- CVE-2005-3345rssh 2.0.0 through 2.2.3 allows local users to bypass access…
- CVE-2005-3346Buffer overflow in the environment variable substitution cod…
- CVE-2005-3347Multiple directory traversal vulnerabilities in index.php in…
- CVE-2005-3349GNU Gnump3d before 2.9.8 allows local users to modify or del…
- CVE-2005-3350libungif library before 4.1.0 allows attackers to corrupt me…
- CVE-2005-3351SpamAssassin 3.0.4 allows attackers to bypass spam detection…
- CVE-2005-3352Cross-site scripting (XSS) vulnerability in the mod_imap mod…
- CVE-2005-3353The exif_read_data function in the Exif module in PHP before…
- CVE-2005-3354Stack-based buffer overflow in the ldif_get_line function in…
Are you affected by CVE-2005-3348?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST