CVE-2005-4830 CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type par...
HighCVSS 7.6
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viewcvs | = 0.9.2 | No fix listed |
| debian/viewvc(Debian:10) | < 0.9.4+svn20060318-1 | 0.9.4+svn20060318-1 |
References
- 20050101 Two Vulnerabilities in ViewCVS mailing-list
- 20070226 ViewCVS 0.9.4 issues mailing-list
- 12112 exploit vdb-entry