CVE-2007-1713 CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequence...
MediumCVSS 6.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| b21soft basp21 | <= 1.0.702.27 | No fix listed |
| b21soft basp21 | = 2003.0211 | No fix listed |
References
- JVN#86092776 third-party-advisory
- 34495 vdb-entry
- 24652 third-party-advisory vendor-advisory
- www.hi-ho.ne.jp
- 23134 vdb-entry
- ADV-2007-1113 vdb-entry
- basp21-bsmtp-mail-relay(33211) vdb-entry