CVE-2005-3883
- State
- Published
- Severity
- Not scored
- Published
- Nov 29, 2005
- Updated
- Aug 7, 2024
- Reserved
- Nov 29, 2005
Description
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20210third-party-advisory
- TLSA-2006-38vendor-advisory
- 18198third-party-advisory
- RHSA-2006:0276vendor-advisory
- 17763third-party-advisory
- 18054third-party-advisory
- oval:org.mitre.oval:def:10332vdb-entrysignature
- http://bugs.php.net/bug.php?id=35307
- http://www.php.net/release_5_1_0.php
- 1015296vdb-entry
- MDKSA-2005:238vendor-advisory
- 20951third-party-advisory
- SUSE-SA:2005:069vendor-advisory
- 15571vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm
- 19832third-party-advisory
- php-mbsendmail-header-injection(23270)vdb-entry
- USN-232-1vendor-advisory
- ADV-2006-2685vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.