Description
CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
References
- basp21-bsmtp-mail-relay(33211) vdb-entry
- http://www.hi-ho.ne.jp/babaq/basp21.html
- 34495 vdb-entry
- ADV-2007-1113 vdb-entry
- 23134 vdb-entry
- JVN#86092776 third-party-advisory
- 24652 third-party-advisory