Security Advisory

CVE-2005-1087

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-04-13 04:00:00
Last updated 2024-08-07 21:35:59
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.