{"id":"CVE-2005-1087","aliases":["EUVD-2005-1090","GHSA-826q-6vv7-58g6"],"status":"published","title":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote...","description":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02288,"percentile":0.83318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-04-07T04:00:00Z","modified":"2026-06-16T22:12:24Z","exploits":[{"source":"exploitdb","id":"EDB-25365","title":"AN HTTPD 1.42 - Arbitrary Log Content Injection","type":"remote","platform":"windows","date":"2005-04-08","verified":true,"url":"https://www.exploit-db.com/exploits/25365"}],"products":[{"vendor":"an","product":"an-httpd"}],"references":[{"url":"http://www.osvdb.org/15362","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/anhttpd142n.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/14861","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20031","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1013666","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1087"},{"url":"https://github.com/advisories/GHSA-826q-6vv7-58g6"}],"sources":{"cve":[{"id":"CVE-2005-1087","description":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.","status":"published","published":"2005-04-13T04:00:00Z","modified":"2024-08-07T21:35:59.851Z","updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1090","description":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.","status":"published","published":"2005-04-13T04:00:00Z","modified":"2024-08-07T21:35:59Z","updated_at":"2026-11-03T01:15:35.414401Z"}],"ghsa":[{"id":"GHSA-826q-6vv7-58g6","title":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote...","description":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.","status":"published","published":"2022-05-01T01:55:14Z","modified":"2023-01-30T05:07:04Z","updated_at":"2026-11-02T14:47:37.414363Z"}],"nvd":[{"id":"CVE-2005-1087","description":"CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.","status":"published","published":"2005-04-07T04:00:00Z","modified":"2026-06-16T22:12:24.613Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:54.594271Z"}]}}