Vulnerability in IBM Lotus Notes
CVE-2005-1405
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Lotus_notes — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)