CVE-2004-1687

Опубликовано: 16 сент. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Ссылки

http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
Vendor Advisory
http://marc.info/?l=bugtraq&m=109537195413691&w=2
http://secunia.com/advisories/12590
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11201
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
Vendor Advisory
http://marc.info/?l=bugtraq&m=109537195413691&w=2
http://secunia.com/advisories/12590
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11201
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07746

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xrcm-f723-98ww

github

почти 4 года назад