Unscored CVE-2003-1338 EUVD-2003-1328GHSA-j9xh-275w-pxxw

CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and po…

Published Sep 23, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.

References

20030629 Aprelium Abyss webserver X1 arbitrary code execution and header injection mailing-list