VulnerabilityModified
CVE-2007-1713
CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
MEDIUM 6.4EPSS 1.45%
Does this matter?
Lower severity and a low EPSS score (1.45%). Track it; it rarely justifies an emergency change on its own.
Description
CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.45% probability · 72th percentile
- CISA KEV
- Not listed
- Affected
- b21soft/basp21
- Source
- cve@mitre.org
References
- http://jvn.jp/jp/JVN%2386092776/index.html
- http://osvdb.org/34495
- http://secunia.com/advisories/24652Vendor Advisory
- http://www.hi-ho.ne.jp/babaq/basp21.html
- http://www.securityfocus.com/bid/23134
- http://www.vupen.com/english/advisories/2007/1113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33211
- http://jvn.jp/jp/JVN%2386092776/index.html
- http://osvdb.org/34495
- http://secunia.com/advisories/24652Vendor Advisory
- http://www.hi-ho.ne.jp/babaq/basp21.html
- http://www.securityfocus.com/bid/23134
- http://www.vupen.com/english/advisories/2007/1113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33211
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.