CVE-2005-1405

IBM Lotus Notes - HTTP Response Splitting via @SetHTTPHeader Function

Title source: llm
STIX 2.1

Description

HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/15365
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14879
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/20045
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/699798
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013839

Scores

EPSS 0.0036
EPSS Percentile 28.3%

Details

Status published
Products (9)
ibm/lotus_notes 6.0
ibm/lotus_notes 6.0.1
ibm/lotus_notes 6.0.2
ibm/lotus_notes 6.0.3
ibm/lotus_notes 6.0.4
ibm/lotus_notes 6.5
ibm/lotus_notes 6.5.1
ibm/lotus_notes 6.5.2
ibm/lotus_notes 6.5.3
Published May 03, 2005
Tracked Since Feb 18, 2026