CVE-2009-4086

CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting…

published November 27, 2009

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04765 · 91.9th percentile
Published
2009-11-27T20:45Z
EPSS history
Timeline
  • 27 NOV 20:45Z
    CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting…
    cvelistv5