Lucene search
HistoryApr 13, 2005 - 4:00 a.m.
CVE-2005-1087
crlf injection
cmdis.dll
an httpd server
vulnerability
remote attackers
logfile
file reading
security
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Affected configurations
Node
anan-httpdMatch1.42n
| CPE | Name | Operator | Version |
|---|---|---|---|
| an:an-httpd | an an-httpd | eq | 1.42n |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2005-1087