laptop and a wrench

Bug

Improper neutralization of CRLF (Carriage Return Line Feed) sequences in HTTP Headers (HTTP response splitting) allow for ArcIMS to set an arbitrary cookie.

Last Published: September 15, 2014 ArcIMS
Bug ID Number BUG-000081091
SubmittedSeptember 4, 2014
Last ModifiedApril 27, 2022
SeverityHigh
Applies toArcIMS
Version found10.0
Operating SystemWindows OS
Operating System Version7
StatusWill Not Be Addressed

Additional Information

ArcIMS is at end of life.

Steps to Reproduce

Bug ID: BUG-000081091

Software:

  • ArcIMS

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback