QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-1166

Back to search

CVE-2004-1166

Published: Dec 10, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

VendorProductVersions

n/a

n/a

affected
n/a

References

MS06-042
vendor-advisory
x_refsource_MS
29346
third-party-advisory
x_refsource_SECUNIA
11826
vdb-entry
x_refsource_BID
ADV-2006-3212
vdb-entry
x_refsource_VUPEN
28208
vdb-entry
x_refsource_BID
ADV-2008-0870
vdb-entry
x_refsource_VUPEN
12299
vdb-entry
x_refsource_OSVDB
oval:org.mitre.oval:def:462
vdb-entry
signature
x_refsource_OVAL
13404
third-party-advisory
x_refsource_SECUNIA
1012444
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now