Description
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Andrew Fasano · pythonremotelinux
https://www.exploit-db.com/exploits/40911
References (4)
Scores
CVSS v3
8.1
EPSS
0.0921
EPSS Percentile
92.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-113
Status
published
Products (2)
Intel/VirusScan Enterprise Linux (VSEL)
2.0.3 (and earlier)
mcafee/virusscan_enterprise
< 2.0.3
Published
Mar 14, 2017
Tracked Since
Feb 18, 2026