Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1087. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary This exploit demonstrates a log injection vulnerability in AN HTTPD 1.42n, allowing arbitrary content injection into log files. It can be used to conceal attacks, execute BAT file commands, or aid in exploiting a remote buffer overflow vulnerability.
Description
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Exploits (1)
This exploit demonstrates a log injection vulnerability in AN HTTPD 1.42n, allowing arbitrary content injection into log files. It can be used to conceal attacks, execute BAT file commands, or aid in exploiting a remote buffer overflow vulnerability.