CVE-2005-1087

Published: Apr 7, 2005Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

Affected (1)

Products: An: An Httpd

1 product

An Httpd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
An An Httpd	Version 1.42n

References (10)

http://secunia.com/advisories/14861

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1013666

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/15362

Source: cve@mitre.org

Vendor Advisory

http://www.security.org.sg/vuln/anhttpd142n.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/20031

Source: cve@mitre.org

http://secunia.com/advisories/14861