Test ID:	1.3.6.1.4.1.25623.1.0.806994
Category:	Web Servers
Title:	H2O HTTP Server < 1.6.2, 1.7.x < 1.7.0-beta3 CRLF Injection Vulnerability
Summary:	H2O HTTP Server is prone to CRLF Injection Vulnerability.
Description:	Summary: H2O HTTP Server is prone to CRLF Injection Vulnerability. Vulnerability Insight: The flaw is due to insufficient validation of user supplied input by 'on_req function' in 'lib/handler/redirect.c' script. Vulnerability Impact: Successful exploitation will allow an attacker to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Affected Software/OS: H2O HTTP Server versions before 1.6.2 and 1.7.x before 1.7.0-beta3. Solution: Upgrade to version 1.6.2 or 1.7.0-beta3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1133 http://jvn.jp/en/jp/JVN45928828/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000003
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.