CVE

Id
5789  
CVE No.
CVE-2002-1405  
Status
Entry  
Description
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32544 5789 CVE-2002-1405 BUGTRAQ:20020819 Lynx CRLF Injection  View
32545 5789 CVE-2002-1405 URL:http://marc.info/?l=bugtraq&m=102978118411977&w=2  View
32546 5789 CVE-2002-1405 BUGTRAQ:20020822 Lynx CRLF Injection, part two  View
32547 5789 CVE-2002-1405 URL:http://marc.info/?l=bugtraq&m=103003793418021&w=2  View
32548 5789 CVE-2002-1405 DEBIAN:DSA-210  View
32549 5789 CVE-2002-1405 URL:http://www.debian.org/security/2002/dsa-210  View
32550 5789 CVE-2002-1405 CALDERA:CSSA-2002-049.0  View
32551 5789 CVE-2002-1405 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt  View
32552 5789 CVE-2002-1405 REDHAT:RHSA-2003:029  View
32553 5789 CVE-2002-1405 URL:http://www.redhat.com/support/errata/RHSA-2003-029.html  View
32554 5789 CVE-2002-1405 REDHAT:RHSA-2003:030  View
32555 5789 CVE-2002-1405 URL:http://www.redhat.com/support/errata/RHSA-2003-030.html  View
32556 5789 CVE-2002-1405 TRUSTIX:2002-0085  View
32557 5789 CVE-2002-1405 URL:http://www.trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt  View
32558 5789 CVE-2002-1405 MANDRAKE:MDKSA-2003:023  View
32559 5789 CVE-2002-1405 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:023  View
32560 5789 CVE-2002-1405 BID:5499  View
32561 5789 CVE-2002-1405 URL:http://www.securityfocus.com/bid/5499  View
32562 5789 CVE-2002-1405 XF:lynx-crlf-injection(9887)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63309 JVNDB-2003-000035 Lynx における HTTP ヘッダが偽造される脆弱性 テキストブラウザ lynx には、コマンドライン上から与えられる URL の解析に不備が存在し、意図的に作成された特別な文字列 (改行 (CR) 及び 復帰 (LF) コード、空白スペース文字から成る文字列) を含む URL が与えられた lynx を実行させることにより、外部から HTTPヘッダに手を加えられる脆弱性が存在します。 CVE-2002-1405 5789 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000035.html  View