CVE-2005-1087

EPSS 2.3%

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/25365unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/14861 http://securitytracker.com/id?1013666 https://exchange.xforce.ibmcloud.com/vulnerabilities/20031 http://www.osvdb.org/15362 http://www.security.org.sg/vuln/anhttpd142n.html