NetSight
IP …
medium5.0Public exploit code

CVE-2002-1405

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the comman…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

Affected products

VendorProductAffected versions
ElinksElinks
Versions 0.2.4, 0.3.2
LinksLinks
Version 0.96
University Of KansasLynx
Versions 2.8.2_rel1, 2.8.3, 2.8.3_rel1, 2.8.4, 2.8.4_rel1, 2.8.5_dev8

References