NVD

Id
69521  
Name
CVE-2005-3883  
Description
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-11-29  
Modified Date
2016-12-07  
Seq
2005-3883  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359390 69521 CVE-2005-3883 20060501-01-U  View
359391 69521 CVE-2005-3883 http://bugs.php.net/bug.php?id=35307  View
359392 69521 CVE-2005-3883 oval:org.mitre.oval:def:10332  View
359393 69521 CVE-2005-3883 RHSA-2006:0276  View
359394 69521 CVE-2005-3883 1015296  View
359395 69521 CVE-2005-3883 http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm  View
359396 69521 CVE-2005-3883 MDKSA-2005:238  View
359397 69521 CVE-2005-3883 http://www.php.net/release_5_1_0.php  View
359398 69521 CVE-2005-3883 SUSE-SA:2005:069  View
359399 69521 CVE-2005-3883 15571  View
359400 69521 CVE-2005-3883 TLSA-2006-38  View
359401 69521 CVE-2005-3883 ADV-2006-2685  View
359402 69521 CVE-2005-3883 php-mbsendmail-header-injection(23270)  View
359403 69521 CVE-2005-3883 USN-232-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62502 JVNDB-2005-000704 PHP の mb_send_mail() における任意のヘッダを挿入される脆弱性 PHP の mb_send_mail() 関数には、パラメータの妥当性チェックに不備が存在するため、最初のパラメータ (to 引数) に任意のヘッダを挿入される脆弱性が存在します。 CVE-2005-3883 15085 CVE-2005-3883 69521 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000704.html 2005-11-25 2007-04-01 View