CVE-2002-1405

Publication date

2004-09-01 04:00:00

Family

mitre

State

PUBLISHED

Description

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.