CVE-2004-1687 - CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter

Back Back to CVE browser

MEDIUM

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter

Published Feb 20, 2005

5.0

MEDIUM

CVSS 2.0

EPSS 2.44%

Description

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
x_refsource_CONFIRMVendor Advisory
http://marc.info/?l=bugtraq&m=109537195413691&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/12590
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/11201
vdb-entryx_refsource_BIDExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1681
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
vdb-entryx_refsource_XF

Link	Providers	Tags
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791		x_refsource_CONFIRMVendor Advisory
http://marc.info/?l=bugtraq&m=109537195413691&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/12590		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/11201		vdb-entryx_refsource_BIDExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1681		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 20, 2005

Updated Aug 8, 2024

Reserved Feb 21, 2005

Link CVE-2004-1687

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-1687

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 20, 2005

Updated Aug 8, 2024

Link EUVD-2004-1681

GitHub

No data