Secunia

Description
A vulnerability has been reported in Sun Java System Web Server, which can be exploited by malicious people to conduct HTTP header injection attacks, HTTP response splitting attacks, and disclose potentially sensitive information.

The vulnerability is caused due to an unspecified error within the "redirect" feature and can be exploited if the "redirect" Server Application Function (SAF) is set to use the "url-prefix" parameter in combination with the "escape" parameter set to "no", or if an "Error" directive uses the "url-prefix" parameter in the "obj.conf" file.

Solution
Apply updates or patches (please see vendor advisory for patch information).
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103003-1

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area