Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026

CVE-2005-4830

Description

CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.

Affected products

Viewvc/Viewcvs2 versions
cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*
- (no CPE)range: = 0.9.2
osv-coords
pkg:deb/debian/viewvc?arch=source
Range: < 0.9.4+svn20060318-1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/12112nvdExploit
lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.htmlnvd
www.securityfocus.com/archive/1/461382/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000