CVE-2016-2303
published 2016-04-22CVE-2016-2303: CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response…
PriorityP427medium5.3CVSS 3.0
AVNACLPRNUINSUCNILAN
EPSS
1.05%
60.1th percentile
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ecava | integraxor | <= 4.2.4502 | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Ecava IntegraXor Vulnerabilities
cisa_ics·2018-08-23
Ecava IntegraXor Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Ecava IntegraXor Vulnerabilities
Last RevisedAugust 23, 2018
Alert CodeICSA-16-105-03
## OVERVIEW
Independent security researcher Marcus Richerson and Steven Seeley of Source Incite, working with Trend Micro’s Zero Day Initiative, independently identified vulnerabilities in Ecava’s IntegraXor application. Ecava has produced a new version to mitigate these vulnerabilities. Marcus Richerson has tested the new version to validate that it resolves all the vulnerabilities, except for one incomplete fix, which Ecava plans to fully address in an upcoming release.
These vulnerabilities
GHSA
GHSA-9gxq-rfrc-79c7: CRLF injection vulnerability in Ecava IntegraXor before 5
ghsa_unreviewed·2022-05-17
CVE-2016-2303 [MEDIUM] GHSA-9gxq-rfrc-79c7: CRLF injection vulnerability in Ecava IntegraXor before 5
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-04-22
Published