NVD

Id
71556  
Name
CVE-2004-1166  
Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1166  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370132 71556 CVE-2004-1166 20041207 7a69Adv#15 - Internet Explorer FTP command injection  View
370133 71556 CVE-2004-1166 oval:org.mitre.oval:def:462  View
370134 71556 CVE-2004-1166 1012444  View
370135 71556 CVE-2004-1166 MS06-042  View
370136 71556 CVE-2004-1166 http://www.rapid7.com/advisories/R7-0032.jsp  View
370137 71556 CVE-2004-1166 20080313 Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability  View
370138 71556 CVE-2004-1166 11826  View
370139 71556 CVE-2004-1166 28208  View
370140 71556 CVE-2004-1166 ADV-2006-3212  View
370141 71556 CVE-2004-1166 ADV-2008-0870  View
370142 71556 CVE-2004-1166 web-browser-ftp-command-execution(18384)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63167 JVNDB-2004-000509 Microsoft Internet Explorer における任意の FTP コマンドを実行される脆弱性 ------------ CVE-2004-1166 9593 CVE-2004-1166 71556 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000509.html 2004-12-01 2007-04-01 View