What’s Vulnerable › Vulnerabilities

CVE-2005-1087

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-04-07 · updated 2026-06-16

Description

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

Affected products

• An-Httpd: 1.42n

References

• http://secunia.com/advisories/14861
• http://securitytracker.com/id?1013666
• http://www.osvdb.org/15362
• http://www.security.org.sg/vuln/anhttpd142n.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20031
• http://secunia.com/advisories/14861
• http://securitytracker.com/id?1013666
• http://www.osvdb.org/15362
• http://www.security.org.sg/vuln/anhttpd142n.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20031

Get alerted when CVE-2005-1087 or the next vulnerability affects your stack