CVEvulnerability
CVE-2004-1687
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
Affected configurations
• snitz communications snitz forums 2000 3.0
• snitz communications snitz forums 2000 3.1
• snitz communications snitz forums 2000 3.3
• snitz communications snitz forums 2000 3.3.01
• snitz communications snitz forums 2000 3.3.02
• snitz communications snitz forums 2000 3.3.03
• snitz communications snitz forums 2000 3.4.02
• snitz communications snitz forums 2000 3.4.03
• snitz communications snitz forums 2000 3.4.04
Related
Referenced by CWE · observed example (1)
- CWE-93 Improper Neutralization of CRLF Sequences weakness
References
- http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 Vendor Advisory
- http://marc.info/?l=bugtraq&m=109537195413691&w=2 marc.info
- http://secunia.com/advisories/12590 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11201 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17421 exchange.xforce.ibmcloud.com
- http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 Vendor Advisory
- http://marc.info/?l=bugtraq&m=109537195413691&w=2 marc.info
- http://secunia.com/advisories/12590 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11201 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17421 exchange.xforce.ibmcloud.com