CVE-2011-5279

Опубликовано: 23 апр. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.

Ссылки

http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2e
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/0
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/13
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/108
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/128
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/247
Exploit
Mailing List
Third Party Advisory
http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2e
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/0
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/13
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/108
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/128
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/247
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:microsoft:internet_information_services:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_nt:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08547

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qgmx-m7r8-pq37

github

больше 3 лет назад