CVEvulnerability
CVE-2004-1513
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.
Affected configurations
• soft3304 04webserver 1.42
Related
Referenced by CWE · observed example (1)
- CWE-93 Improper Neutralization of CRLF Sequences weakness
References
- http://marc.info/?l=bugtraq&m=110012542615484&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110054395311823&w=2 marc.info
- http://secunia.com/advisories/13159/ Vendor Advisory
- http://www.security.org.sg/vuln/04webserver142.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11652 Exploit, Patch
- http://www.soft3304.net/04WebServer/Security.html www.soft3304.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18034 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110012542615484&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110054395311823&w=2 marc.info
- http://secunia.com/advisories/13159/ Vendor Advisory
- http://www.security.org.sg/vuln/04webserver142.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11652 Exploit, Patch
- http://www.soft3304.net/04WebServer/Security.html www.soft3304.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18034 exchange.xforce.ibmcloud.com