Description

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.

Remediation

References

CVE-2011-5279

Related Vulnerabilities

WordPress Plugin GNUCommerce Cross-Site Scripting (1.4.1)

Oracle JRE CVE-2014-2402 Vulnerability (CVE-2014-2402)

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-1011)

WeBid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3815)

WordPress 2.6.1 Lost Password SQL Column Truncation Unauthorized Access Vulnerability (0.71 - 2.6.1)

Severity

Medium

Classification

CVE-2011-5279

Tags

Missing Update Known Vulnerabilities