CVE-2009-1777 - CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter

Back Back to CVE browser

MEDIUM

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter

Published May 22, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 1.97%

Description

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://secunia.com/advisories/35068
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/503446/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34929
vdb-entryx_refsource_BID
http://www.ush.it/team/ush/hack-formmail_192/adv.txt
x_refsource_MISCExploit

Link	Providers	Tags
http://secunia.com/advisories/35068		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/503446/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34929		vdb-entryx_refsource_BID
http://www.ush.it/team/ush/hack-formmail_192/adv.txt		x_refsource_MISCExploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 22, 2009

Updated Aug 7, 2024

Reserved May 22, 2009

Link CVE-2009-1777

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1777

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1777