Description

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.

Remediation

References

CVE-2011-5279

Related Vulnerabilities

e107 Other Vulnerability (CVE-2006-4757)

WordPress Plugin WordPoints Multiple Vulnerabilities (1.7.0)

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-26465)

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4207)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner SQL Injection (4.2.161)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2011-5279