Description

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.

Remediation

References

CVE-2001-0902

Related Vulnerabilities

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6852)

WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)

AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)

Oracle Database Server CVE-2011-2242 Vulnerability (CVE-2011-2242)

Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-32780)

Severity

High

Classification

CVE-2001-0902

Tags

Missing Update Known Vulnerabilities