Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file.
https://www.exploit-db.com/exploits/7560
https://exchange.xforce.ibmcloud.com/vulnerabilities/47579
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5700