CVE-2002-1783 Other in n/a
Remote attackers can inject CRLF sequences into HTTP headers via PHP file functions when allow_url_fopen is enabled, potentially modifying outgoing requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-1783?
CVE-2002-1783 is a medium-severity vulnerability in Php Php, published on 28 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
Which versions are affected by CVE-2002-1783?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2002-1783?
No fix has been published for CVE-2002-1783 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-1783 being exploited?
There is no known exploitation of CVE-2002-1783 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-5mpg-wwpc-q4pq.