Penetration Testing mailing list archives

HTTP Response Splitting


From: Joxean Koret <joxeankoret () yahoo es>
Date: 9 Oct 2004 15:44:37 -0000



Hi! 
 
I have a problem trying to test a vulnerability in a 
PHP application. The app. is vulnerable to an HTTP 
Response Splitting attack under Windows 2000 + 
IIS Web Server with IE 6 Browser but this doesn't 
work with Apache 2.0.40 + GNU/Linux and 
Konqueror. 
 
The HTTP Response Splitting attacks only works 
with IIS Web Servers? Or this doesn't work ONLY 
with Apache web servers? 
 
Thanks 

------------------------------------------------------------------------------
Internet Security Systems. - Keeping You Ahead of the Threat

When business losses are measured in seconds, Internet threats must be stopped before they impact your network. To 
learn how Internet Security Systems keeps organizations ahead of the threat with preemptive intrusion prevention, 
download the new whitepaper, Defining the Rules of Preemptive Protection, and end your reliance on reactive security 
technology. 

http://www.securityfocus.com/sponsor/ISS_pen-test_041001
-------------------------------------------------------------------------------


Current thread: