Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2002-1405

Date: August 31, 2004

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

Severity Score

Related Resources (12)

http://www.iss.net/security_center/static/9887.php
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:023
http://www.redhat.com/support/errata/RHSA-2003-030.html
http://marc.info/?l=bugtraq&m=103003793418021&w=2
http://marc.info/?l=bugtraq&m=102978118411977&w=2
https://nvd.nist.gov/vuln/detail/CVE-2002-1405
http://www.trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt
http://www.securityfocus.com/bid/5499
http://www.redhat.com/support/errata/RHSA-2003-029.html
http://www.debian.org/security/2002/dsa-210
https://www.mend.io/vulnerability-database/CVE-2002-1405

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us