Oval Definition:
oval:com.ubuntu.xenial:def:201699640000000
Revision Date
:
2016-12-16
Version
:
1
Title
:
CVE-2016-9964 on Ubuntu 16.04 LTS (xenial) - medium.
Description
:
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2016-9964
Platform(s)
:
Ubuntu 16.04 LTS
Product(s)
:
Definition Synopsis
Ubuntu 16.04 LTS (xenial) is installed.
AND
python-bottle package in xenial was vulnerable but has been fixed (note: '0.12.7-1+deb8u1build0.16.04.1').
BACK