Unrated severityNVD Advisory· Published Apr 23, 2009· Updated Jun 16, 2026
CVE-2009-1357
CVE-2009-1357
Description
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*+ 9 more
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:x86:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:x86:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:linux:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:sparc:*:*:*:*:*
- cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:x86:*:*:*:*:*
- (no CPE)range: >= 6.2 <= 6.4
Patches
Vulnerability mechanics
References
11- securitytracker.com/idnvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- sunsolve.sun.com/search/document.donvdPatchVendor Advisory
- www.vupen.com/english/advisories/2009/1122nvdPatchVendor Advisory
- www.securityfocus.com/bid/34643nvdExploit
- secunia.com/advisories/34760nvdVendor Advisory
- osvdb.org/53920nvd
- sunsolve.sun.com/search/document.donvd
- www.coresecurity.com/content/sun-delegated-administratornvd
- www.securityfocus.com/archive/1/502863/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/50004nvd
News mentions
0No linked articles in our index yet.