Penetration Testing mailing list archives

Re: HTTP Response Splitting


From: Justin Pincar <JustinPincar () gmail com>
Date: Thu, 14 Oct 2004 10:59:05 -0400

It depends on the application itself.
~Justin

On 9 Oct 2004 15:44:37 -0000, Joxean Koret <joxeankoret () yahoo es> wrote:


Hi!

I have a problem trying to test a vulnerability in a

PHP application. The app. is vulnerable to an HTTP

Response Splitting attack under Windows 2000 +

IIS Web Server with IE 6 Browser but this doesn't

work with Apache 2.0.40 + GNU/Linux and

Konqueror.

The HTTP Response Splitting attacks only works

with IIS Web Servers? Or this doesn't work ONLY

with Apache web servers?

Thanks

------------------------------------------------------------------------------
Internet Security Systems. - Keeping You Ahead of the Threat

When business losses are measured in seconds, Internet threats must be stopped before they impact your network. To 
learn how Internet Security Systems keeps organizations ahead of the threat with preemptive intrusion prevention, 
download the new whitepaper, Defining the Rules of Preemptive Protection, and end your reliance on reactive security 
technology.

http://www.securityfocus.com/sponsor/ISS_pen-test_041001
-------------------------------------------------------------------------------



------------------------------------------------------------------------------
Internet Security Systems. - Keeping You Ahead of the Threat

When business losses are measured in seconds, Internet threats must be stopped before they impact your network. To 
learn how Internet Security Systems keeps organizations ahead of the threat with preemptive intrusion prevention, 
download the new whitepaper, Defining the Rules of Preemptive Protection, and end your reliance on reactive security 
technology. 

http://www.securityfocus.com/sponsor/ISS_pen-test_041001
-------------------------------------------------------------------------------


Current thread: