CVE-2005-1087

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

2.29% chance of exploitation in the next 30 days, 82th percentile

Published

2005-04-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25365

References

• CVE Record
• NVD entry

Related

• CVE-2005-1086
• CVE-2005-1092
• CVE-2005-1082
• CVE-2005-1094
• CVE-2005-1081
• CVE-2005-1095