PHP 5.2.3 - EXT/Session HTTP Response Header Injection

Author: Stefan Esser
type: remote
platform: php
port: 
date_added: 2007-06-04  
date_updated: 2013-12-08  
verified: 1  
codes: CVE-2007-3799;OSVDB-36855  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 30130.txt  

source: https://www.securityfocus.com/bid/24268/info

PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input.

An attacker can exploit this issue to inject additional cookie attributes into session cookies. This may lead to other attacks.

This issue affects PHP 5.2.3 (and prior versions) and PHP 4.4.7 (and prior versions).

http://www.example.com/session.php/PHPSESSID=ID;INJECTED=ATTRIBUTE;/