Unrated severityNVD Advisory· Published Apr 23, 2009· Updated Apr 23, 2026
CVE-2009-1357
CVE-2009-1357
Description
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.
Affected products
9cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*+ 8 more
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:x86:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:x86:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:x86:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- securitytracker.com/idnvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatchVendor Advisory
- www.vupen.com/english/advisories/2009/1122nvdPatchVendor Advisory
- www.securityfocus.com/bid/34643nvdExploit
- secunia.com/advisories/34760nvdVendor Advisory
- osvdb.org/53920nvd
- sunsolve.sun.com/search/document.donvd
- www.coresecurity.com/content/sun-delegated-administratornvd
- www.securityfocus.com/archive/1/502863/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/50004nvd
News mentions
0No linked articles in our index yet.