CVEvulnerability
CVE-2010-3011
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
• hp system management homepage (<= 6.1)
• hp system management homepage 2.0.0
• hp system management homepage 2.0.1
• hp system management homepage 2.0.1.104
• hp system management homepage 2.0.2
• hp system management homepage 2.0.2.106
• hp system management homepage 2.1
• hp system management homepage 2.1.0-103
• hp system management homepage 2.1.0-103\(a\)
• hp system management homepage 2.1.0-109
• hp system management homepage 2.1.0-118
• hp system management homepage 2.1.0.121
• hp system management homepage 2.1.1
• hp system management homepage 2.1.2
• hp system management homepage 2.1.2-127
• hp system management homepage 2.1.2.127
• hp system management homepage 2.1.3
• hp system management homepage 2.1.3.132
• hp system management homepage 2.1.4
• hp system management homepage 2.1.4-143
• hp system management homepage 2.1.4.143
• hp system management homepage 2.1.5
• hp system management homepage 2.1.5-146
• hp system management homepage 2.1.5.146
• hp system management homepage 2.1.6
• hp system management homepage 2.1.6-156
• hp system management homepage 2.1.6.156
• hp system management homepage 2.1.7
• hp system management homepage 2.1.7-168
• hp system management homepage 2.1.7.168
• hp system management homepage 2.1.8
• hp system management homepage 2.1.8-177
• hp system management homepage 2.1.8.179
• hp system management homepage 2.1.9
• hp system management homepage 2.1.9-178
• hp system management homepage 2.1.10
• hp system management homepage 2.1.10-186
• hp system management homepage 2.1.10.186
• hp system management homepage 2.1.11
• hp system management homepage 2.1.11-197
• hp system management homepage 2.1.11.197
• hp system management homepage 2.1.12-118
• hp system management homepage 2.1.12-200
• hp system management homepage 2.1.12.201
• hp system management homepage 2.1.14.20
• hp system management homepage 2.1.15-210
• hp system management homepage 2.1.15.210
• hp system management homepage 2.2.6
• hp system management homepage 2.2.8
• hp system management homepage 3.0.0-68
• hp system management homepage 3.0.0.64
• hp system management homepage 3.0.1-73
• hp system management homepage 3.0.1.73
• hp system management homepage 3.0.2-77
• hp system management homepage 3.0.2.77
• hp system management homepage 6.0
• hp system management homepage 6.0.0-95
• hp system management homepage 6.0.0.96
• hp system management homepage 6.1.0-103
• hp system management homepage 6.1.0.102
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/41480 Vendor Advisory
- http://secunia.com/advisories/41490 Vendor Advisory
- http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 www.itrc.hp.com
- http://secunia.com/advisories/41480 Vendor Advisory
- http://secunia.com/advisories/41490 Vendor Advisory
- http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 www.itrc.hp.com