high7.6
CVE-2005-4830
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks v…
Impact
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Viewcvs | Viewcvs | Version 0.9.2 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html
- http://www.securityfocus.com/archive/1/461382/100/0/threaded
- http://www.securityfocus.com/bid/12112
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html
- http://www.securityfocus.com/archive/1/461382/100/0/threaded
- http://www.securityfocus.com/bid/12112