CVE-2004-1166 CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("...
HighCVSS 7.5
EPSS 39.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft ie | = 6.0-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20041207 7a69Adv#15 - Internet Explorer FTP command injection mailing-list
- 13404 third-party-advisory vendor-advisory
- 29346 third-party-advisory vendor-advisory
- 1012444 vdb-entry
- 12299 vdb-entry
- www.rapid7.com
- 20080313 Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability mailing-list
- 11826 exploit vdb-entry vendor-advisory
- 28208 vdb-entry
- ADV-2006-3212 vdb-entry vendor-advisory
- ADV-2008-0870 vdb-entry vendor-advisory
- MS06-042 vendor-advisory
- web-browser-ftp-command-execution(18384) vdb-entry
- oval:org.mitre.oval:def:462 signature vdb-entry