Vulnerability in An An-Httpd
CVE-2005-1087
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.
Affected products
- An An-httpd — versions 1.42n
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)