medium6.4Public exploit code
CVE-2005-1087
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AN HTTPD 1.42 - Arbitrary Log Content Injection2005-04-08 · remote · windows · Verified
Impact
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| An | An-Httpd | Version 1.42n |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14861
- http://securitytracker.com/id?1013666
- http://www.osvdb.org/15362
- http://www.security.org.sg/vuln/anhttpd142n.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20031
- http://secunia.com/advisories/14861
- http://securitytracker.com/id?1013666
- http://www.osvdb.org/15362
- http://www.security.org.sg/vuln/anhttpd142n.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20031