CVE:CVE-2004-1687
CNNVD:CNNVD-200409-036
Snitz Forums 2000 3.4.04版本的down.asp存在CRLF注入漏洞。远程攻击者借助location参数执行HTTP响应拆分攻击来修改期望的服务器HTML内容。
solution:Upgrade snitz_communications snitz_forums_2000 to a higher version than 3.0,3.1:sr4,3.3,3.3.01,3.3.02,3.3.03,3.4.02,3.4.03,3.4.04,and avoid the version 3.0,3.1:sr4,3.3,3.3.01,3.3.02,3.3.03,3.4.02,3.4.03,3.4.04