CVE-2005-3348

Publication date 18 November 2005

Last updated 24 July 2024

Ubuntu priority

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
egroupware	7.04 feisty	Fixed 1.0.0.009.dfsg-3-4
	6.10 edgy	Fixed 1.0.0.009.dfsg-3-4
	6.06 LTS dapper	Fixed 1.0.0.009.dfsg-3-4
phpgroupware	7.04 feisty	Fixed 0.9.16.010-1
	6.10 edgy	Fixed 0.9.16.010-1
	6.06 LTS dapper	Fixed 0.9.16.010-1
phpsysinfo	7.04 feisty	Fixed 2.3-7
	6.10 edgy	Fixed 2.3-7
	6.06 LTS dapper	Fixed 2.3-7

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2005-3348