Unrated severityNVD Advisory· Published Apr 7, 2005· Updated Jun 16, 2026

CVE-2005-1087

Description

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

An/An Httpd
cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:*
An/HTTPD Serverllm-create
Range: =1.42n

Patches

Vulnerability mechanics

References

secunia.com/advisories/14861nvdVendor Advisory
securitytracker.com/idnvdVendor Advisory
www.osvdb.org/15362nvdVendor Advisory
www.security.org.sg/vuln/anhttpd142n.htmlnvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/20031nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000