CVE-2004-1470

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.

Affected (1)

Products: Snipsnap: Snipsnap

Snipsnap

1 product

Snipsnap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Snipsnap Snipsnap	Version 0.5.2a

References (10)

http://marc.info/?l=bugtraq&m=109518773223511&w=2

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/11180

Source: cve@mitre.org

ExploitPatch

http://www.snipsnap.org/space/start

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17364

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109518773223511&w=2