Description
CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.
References
- 19676 vdb-entry
- 28131 vdb-entry
- 21543 third-party-advisory
- JVN#11048526 third-party-advisory
- http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549
- ADV-2006-3359 vdb-entry