[email protected]CVE-2004-1687

HistorySep 16, 2004 - 4:00 a.m.

CVE-2004-1687

2004-09-1604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

crlf injection

snitz forums 2000

http response splitting

cve-2004-1687

nvd

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.8%

JSON

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

CPENameOperatorVersion
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.1
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.4.03
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3.01
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3.02
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.4.02
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.4.04
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.0
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3.03

CPE	Name	Operator	Version
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.1
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.4.03
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3.01
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3.02
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.4.02
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.4.04
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.0
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3.03

References

forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791

marc.info/?l=bugtraq&m=109537195413691&w=2

secunia.com/advisories/12590

www.securityfocus.com/bid/11201

exchange.xforce.ibmcloud.com/vulnerabilities/17421

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.8%

JSON

Related for CVE-2004-1687

openvas1