Unscored CVE-2006-6276 EUVD-2006-6259GHSA-vphg-jwvg-jv3g

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or …

Published Dec 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.

References

102733 vendor-advisory
23186 third-party-advisory
1017324 vdb-entry
sunserver-proxy-csrf(30662) vdb-entry
ADV-2006-4793 vdb-entry
21371 vdb-entry
1017323 vdb-entry
1017322 vdb-entry