CVE-2005-3348

Publication date 18 November 2005

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.

Status

Package Ubuntu Release Status
egroupware 7.04 feisty
Fixed 1.0.0.009.dfsg-3-4
6.10 edgy
Fixed 1.0.0.009.dfsg-3-4
6.06 LTS dapper
Fixed 1.0.0.009.dfsg-3-4
phpgroupware 7.04 feisty
Fixed 0.9.16.010-1
6.10 edgy
Fixed 0.9.16.010-1
6.06 LTS dapper
Fixed 0.9.16.010-1
phpsysinfo 7.04 feisty
Fixed 2.3-7
6.10 edgy
Fixed 2.3-7
6.06 LTS dapper
Fixed 2.3-7

References

Other references

Access our resources on patching vulnerabilities