CVE-2008-3906

Mono <2.0 - HTTP Response Splitting

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3906. PoCs published by Juraj Skripsky.

AI-analyzed exploit summary This is a writeup describing a vulnerability in Mono 2.0 and earlier where arbitrary HTTP headers can be injected due to lack of input sanitization. The provided code snippet demonstrates how query parameters can be directly saved into cookies without validation.

Description

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Juraj Skripsky · textremotelinux
https://www.exploit-db.com/exploits/32303

This is a writeup describing a vulnerability in Mono 2.0 and earlier where arbitrary HTTP headers can be injected due to lack of input sanitization. The provided code snippet demonstrates how query parameters can be directly saved into cookies without validation.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Mono 2.0 and earlier
No auth needed
Prerequisites: A web application running on Mono 2.0 or earlier that processes user input without sanitization
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (11)

Core 11
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/30867
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44740
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36494
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2008/08/27/6
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2443
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/496845/100/0/threaded
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=418620
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/826-1/
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31643
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:210

Scores

EPSS 0.0811
EPSS Percentile 92.3%

Details

CWE
CWE-20
Status published
Products (20)
mono/mono 1.0
mono/mono 1.0.5
mono/mono 1.1.4
mono/mono 1.1.8.3
mono/mono 1.1.13
mono/mono 1.1.13.4
mono/mono 1.1.13.6
mono/mono 1.1.13.7
mono/mono 1.1.17
mono/mono 1.1.17.1
... and 10 more
Published Sep 04, 2008
Tracked Since Feb 18, 2026