CVE-2004-1513

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.

Affected (1)

Products: Soft3304: 04webserver

Soft3304

1 product

04webserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Soft3304 04webserver	Version 1.42

References (14)

http://marc.info/?l=bugtraq&m=110012542615484&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110054395311823&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13159/

Source: cve@mitre.org

Vendor Advisory

http://www.security.org.sg/vuln/04webserver142.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/11652

Source: cve@mitre.org

ExploitPatch

http://www.soft3304.net/04WebServer/Security.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18034

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110012542615484&w=2