CVE-2014-9650 | BDVDB-2026-67692 Detail

Description#

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to api/definitions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2016-0308.html
https://groups.google.com/forum/#%21topic/rabbitmq-users/-3Z2FyGtXhs
http://www.rabbitmq.com/release-notes/README-3.4.1.txt
http://www.securityfocus.com/bid/76091
http://www.openwall.com/lists/oss-security/2015/01/21/13

Exploit#

No public exploit known

History#

Version 12015-01-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.