CVE-2005-3621: CRLF Injection
Published Nov 16, 2005
·Updated
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
Affected Software
15 affected componentsFixes available
composer/phpmyadmin/phpmyadmin<2.6.4-pl4
2.6.4-pl4
debian/phpmyadmin
4:5.0.4+dfsg2-2+deb11u14:5.2.1+dfsg-1
phpMyAdmin phpMyAdmin=2.2.0
phpMyAdmin phpMyAdmin=2.2.7_pl1
phpMyAdmin phpMyAdmin=2.5.2_pl1
phpMyAdmin phpMyAdmin=2.5.3
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.5.5_pl1
phpMyAdmin phpMyAdmin=2.5.6_rc2
phpMyAdmin phpMyAdmin=2.5.7_pl1
phpMyAdmin phpMyAdmin=2.6.0_pl3
phpMyAdmin phpMyAdmin=2.6.1_pl3
phpMyAdmin phpMyAdmin=2.6.2_pl1
phpMyAdmin phpMyAdmin=2.6.3_pl1
phpMyAdmin phpMyAdmin=2.6.4_pl3
Remediation
Event History
Nov 16, 2005
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
May 1, 2022
Advisory Published
02:19 AM
Frequently Asked Questions
1
What is the severity of CVE-2005-3621?
CVE-2005-3621 has a medium severity rating due to its potential for HTTP response splitting attacks.
2
How do I fix CVE-2005-3621?
To fix CVE-2005-3621, upgrade phpMyAdmin to version 2.6.4-pl4 or later.
3
What versions of phpMyAdmin are affected by CVE-2005-3621?
CVE-2005-3621 affects phpMyAdmin versions prior to 2.6.4-pl4, including 2.5.2_pl1, 2.6.2_pl1, and 2.6.3_pl1.
4
What type of attacks can be conducted due to CVE-2005-3621?
CVE-2005-3621 allows attackers to conduct HTTP response splitting attacks.
5
Is CVE-2005-3621 a local or remote vulnerability?
CVE-2005-3621 is a remote vulnerability that can be exploited by attackers over the network.