CVE-2005-4830: CRLF Injection
Published Dec 31, 2005
·Updated
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
Affected Software
1 affected component
ViewCVS ViewCVS=0.9.2
Event History
Dec 31, 2005
CVE Published
05:00 AM
Mar 4, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4830?
CVE-2005-4830 is considered a moderate severity vulnerability due to its potential for HTTP response splitting attacks.
2
How do I fix CVE-2005-4830?
To fix CVE-2005-4830, upgrade to a version of ViewCVS that is not vulnerable to CRLF injection.
3
What is the impact of CVE-2005-4830?
CVE-2005-4830 allows remote attackers to inject arbitrary HTTP headers, leading to security issues such as cache poisoning.
4
Which versions of ViewCVS are affected by CVE-2005-4830?
ViewCVS version 0.9.2 is specifically affected by CVE-2005-4830.
5
How can attackers exploit CVE-2005-4830?
Attackers can exploit CVE-2005-4830 by injecting CRLF sequences in the content-type parameter to manipulate HTTP headers.