CVE-2005-1087 CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command,....
MediumCVSS 6.4
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| an-httpd | = 1.42n | No fix listed |
References
- 14861 third-party-advisory vendor-advisory
- 1013666 vdb-entry vendor-advisory
- 15362 vdb-entry vendor-advisory
- www.security.org.sg vendor-advisory
- an-httpd-logfile-character-injection(20031) vdb-entry