CVE-2016-8024
HighSummary
The vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) involves improper neutralization of CRLF sequences in HTTP headers, allowing a remote unauthenticated attacker to obtain sensitive information via server HTTP response spoofing.
Risk Assessment
An attacker could exploit this vulnerability to intercept sensitive data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to upgrade to the latest version of Intel Security VirusScan Enterprise Linux to eliminate this vulnerability and implement additional security measures to protect against spoofing attacks.
Other vulnerabilities in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier
See all- CVE-2016-8023High
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows a remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie.
- CVE-2016-8020High
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.
Original NVD description (English source)
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing.