Blogger’s personal page redirection mechanism contains a classic HTTP response splitting vulnerability in the “Location” HTTP header. The problem occurs due to use of unsanitized user-supplied data in the “Location” HTTP header, which enables attacker to inject CRLF(%0d%0a) characters thus splitting server’s response taking full control over the contents of second HTTP response. Exploitation of the vulnerability can lead to cross-site scripting (XSS), cache poisoning and phishing attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43325/Blogger_HTTP_response_splitting.txt
Source: https://packetstormsecurity.com/files/43325/Blogger_HTTP_response_splitting.txt.html