CVEvulnerability
CVE-2005-1087
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Affected configurations
• an an-httpd 1.42n
References
- http://secunia.com/advisories/14861 Vendor Advisory
- http://securitytracker.com/id?1013666 Vendor Advisory
- http://www.osvdb.org/15362 Vendor Advisory
- http://www.security.org.sg/vuln/anhttpd142n.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20031 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/14861 Vendor Advisory
- http://securitytracker.com/id?1013666 Vendor Advisory
- http://www.osvdb.org/15362 Vendor Advisory
- http://www.security.org.sg/vuln/anhttpd142n.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20031 exchange.xforce.ibmcloud.com