Description
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
References
- 6795 vdb-entry
- 20011120 IIS logging issue mailing-list
- 20011120 IIS logging issue mailing-list
- iis-fake-log-entry(7613) vdb-entry