Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-1405. PoCs published by Ulf Harnhammar.
AI-analyzed exploit summary This exploit demonstrates a CRLF injection vulnerability in Lynx, allowing an attacker to inject additional HTTP headers into a request. By manipulating the 'Host' header, the attacker can cause the request to be served as if made to a different domain.
Description
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
Exploits (1)
This exploit demonstrates a CRLF injection vulnerability in Lynx, allowing an attacker to inject additional HTTP headers into a request. By manipulating the 'Host' header, the attacker can cause the request to be served as if made to a different domain.