CVE-2011-5279

CVE-2011-5279

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 20%
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.
Affected products
n/a · n/a
References
http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2ehttp://seclists.org/fulldisclosure/2012/Apr/0http://seclists.org/fulldisclosure/2012/Apr/13http://seclists.org/fulldisclosure/2014/Apr/108http://seclists.org/fulldisclosure/2014/Apr/128http://seclists.org/fulldisclosure/2014/Apr/247