https://bugzilla.novell.com/show_bug.cgi?id=418620
Summary: Sys.Web is prone to "HTTP header injection" attacks
Product: Mono: Class Libraries
Version: SVN
Platform: Other
OS/Version: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Sys.Web
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
QAContact: mono-bugs@lists.ximian.com
Found By: ---
Created an attachment (id=234342)
--> (https://bugzilla.novell.com/attachment.cgi?id=234342)
minimal test page as described in the blog entry
This page describes the vulnerability and contains sample code. Using that code
and the "Live HTTP Headers" extension for Firefox, it's easy to verify that
Mono is prone to such attacks.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
_______________________________________________
mono-bugs maillist - mono-bugs@lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-bugs
