CVE-2004-1513

Description

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18034

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1507

http://www.soft3304.net/04WebServer/Security.html

http://www.securityfocus.com/bid/11652

http://www.security.org.sg/vuln/04webserver142.html

http://secunia.com/advisories/13159/

http://marc.info/?l=bugtraq&m=110054395311823&w=2

http://marc.info/?l=bugtraq&m=110012542615484&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS