Description

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.

Remediation

References

CVE-2001-0902

Related Vulnerabilities

Oracle JRE CVE-2013-5846 Vulnerability (CVE-2013-5846)

WordPress Plugin MapPress Maps for WordPress Cross-Site Request Forgery (2.53.8)

WordPress Plugin Pinterest Automatic Pin Security Bypass (4.14.3)

WordPress Plugin WP Login Security and History Cross-Site Request Forgery (1.0)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1164)

Severity

High

Classification

CVE-2001-0902

Tags

Missing Update Known Vulnerabilities