CVE

Id
9594  
CVE No.
CVE-2004-1166  
Status
Candidate  
Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.  
Phase
Assigned (20041209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65116 9594 CVE-2004-1166 BUGTRAQ:20041207 7a69Adv#15 - Internet Explorer FTP command injection  View
65117 9594 CVE-2004-1166 URL:http://marc.info/?l=bugtraq&m=110253463305359&w=2  View
65118 9594 CVE-2004-1166 BUGTRAQ:20080313 Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability  View
65119 9594 CVE-2004-1166 URL:http://www.securityfocus.com/archive/1/archive/1/489500/100/0/threaded  View
65120 9594 CVE-2004-1166 MISC:http://www.rapid7.com/advisories/R7-0032.jsp  View
65121 9594 CVE-2004-1166 MS:MS06-042  View
65122 9594 CVE-2004-1166 URL:http://www.microsoft.com/technet/security/bulletin/ms06-042.mspx  View
65123 9594 CVE-2004-1166 BID:11826  View
65124 9594 CVE-2004-1166 URL:http://www.securityfocus.com/bid/11826  View
65125 9594 CVE-2004-1166 BID:28208  View
65126 9594 CVE-2004-1166 URL:http://www.securityfocus.com/bid/28208  View
65127 9594 CVE-2004-1166 VUPEN:ADV-2006-3212  View
65128 9594 CVE-2004-1166 URL:http://www.vupen.com/english/advisories/2006/3212  View
65129 9594 CVE-2004-1166 VUPEN:ADV-2008-0870  View
65130 9594 CVE-2004-1166 URL:http://www.vupen.com/english/advisories/2008/0870  View
65131 9594 CVE-2004-1166 OSVDB:12299  View
65132 9594 CVE-2004-1166 URL:http://www.osvdb.org/12299  View
65133 9594 CVE-2004-1166 OVAL:oval:org.mitre.oval:def:462  View
65134 9594 CVE-2004-1166 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:462  View
65135 9594 CVE-2004-1166 SECTRACK:1012444  View
65136 9594 CVE-2004-1166 URL:http://securitytracker.com/id?1012444  View
65137 9594 CVE-2004-1166 SECUNIA:13404  View
65138 9594 CVE-2004-1166 URL:http://secunia.com/advisories/13404  View
65139 9594 CVE-2004-1166 SECUNIA:29346  View
65140 9594 CVE-2004-1166 URL:http://secunia.com/advisories/29346  View
65141 9594 CVE-2004-1166 XF:web-browser-ftp-command-execution(18384)  View

Related JVN