MEDIUM · 5.0

CVE-2005-0493

CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email p...

Vulnerability Description

CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
Seth M. KnorrBiz Mail Form<= 2.1

References

FAQ

What is CVE-2005-0493?

CVE-2005-0493 is a vulnerability with a CVSS score of 5.0 (MEDIUM). CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email p...

How severe is CVE-2005-0493?

CVE-2005-0493 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-0493?

Check the references section above for vendor advisories and patch information. Affected products include: Seth M. Knorr Biz Mail Form.