Lucene search
MitreCVE-2003-1338HistorySep 23, 2007 - 11:00 p.m.
CVE-2003-1338
2007-09-2323:00:00
mitre
web.nvd.nist.gov
29
crlf injection
aprelium abyss web server
http response splitting
cve-2003-1338
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.5
Confidence
Low
EPSS
0.002
Percentile
57.8%
CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.
Affected configurations
Node
aprelium_technologiesabyss_web_serverRange≤1.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aprelium_technologies | abyss_web_server | * | cpe:2.3:a:aprelium_technologies:abyss_web_server:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.5
Confidence
Low
EPSS
0.002
Percentile
57.8%
Related for CVE-2003-1338