Lucene search
HistoryDec 31, 2003 - 5:00 a.m.
CVE-2003-1338
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
57.8%
CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.
Affected configurations
Node
aprelium_technologiesabyss_web_serverRange≤1.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aprelium_technologies | abyss_web_server | * | cpe:2.3:a:aprelium_technologies:abyss_web_server:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
57.8%
Related for NVD:CVE-2003-1338