Description
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
References
- 20050101 Two Vulnerabilities in ViewCVS mailing-list
- 20070226 ViewCVS 0.9.4 issues mailing-list
- 12112 vdb-entry