Lucene search

K
cve[email protected]CVE-2008-5730
HistoryDec 26, 2008 - 5:30 p.m.

CVE-2008-5730

2008-12-2617:30:00
CWE-20
web.nvd.nist.gov
31
cve
2008
5730
crlf injection
aist netcat
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file.

Affected configurations

NVD
Node
netcatnetcatRange3.12
OR
netcatnetcatMatch1.1
OR
netcatnetcatMatch2.0
OR
netcatnetcatMatch2.1
OR
netcatnetcatMatch2.2
OR
netcatnetcatMatch2.3
OR
netcatnetcatMatch2.4
OR
netcatnetcatMatch3.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

Related for CVE-2008-5730