CVE-2005-4830

EPSS 0.80%

Published: 12/31/2005Modified: 6/4/2024

Description

CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.

Affected packages (1)

Debian/viewvcfrom 0, < 0.9.4+svn20060318-1

References (3)

EXPLOIThttp://www.securityfocus.com/bid/12112
WEBhttp://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html
WEBhttp://www.securityfocus.com/archive/1/461382/100/0/threaded