CVEvulnerability
CVE-2011-5279
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.
Affected configurations
• microsoft internet information services 4.0
• microsoft internet information services 5.0
References
- http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2e Third Party Advisory
- http://seclists.org/fulldisclosure/2012/Apr/0 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2012/Apr/13 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/108 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/128 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/247 Exploit, Mailing List, Third Party Advisory
- http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2e Third Party Advisory
- http://seclists.org/fulldisclosure/2012/Apr/0 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2012/Apr/13 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/108 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/128 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Apr/247 Exploit, Mailing List, Third Party Advisory