CVE-2002-1783: CRLF Injection
CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allowurlfopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1783?
CVE-2002-1783 has a medium severity rating due to the potential for unauthorized header manipulation.
How do I fix CVE-2002-1783?
To fix CVE-2002-1783, disable the allow_url_fopen directive in your PHP configuration.
Which PHP versions are affected by CVE-2002-1783?
CVE-2002-1783 affects PHP versions 4.2.1 through 4.2.3 and several earlier versions up to 4.0.3.
What type of attack does CVE-2002-1783 enable?
CVE-2002-1783 enables remote attackers to perform CRLF injection attacks, modifying HTTP response headers.
Is CVE-2002-1783 a known vulnerability?
Yes, CVE-2002-1783 is a documented vulnerability that has been publicly disclosed since 2002.