CVE-2002-1405

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt
• http://marc.info/?l=bugtraq&m=102978118411977&w=2
• http://marc.info/?l=bugtraq&m=103003793418021&w=2
• http://www.debian.org/security/2002/dsa-210Patch, Vendor Advisory
• http://www.iss.net/security_center/static/9887.phpPatch, Vendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:023
• http://www.redhat.com/support/errata/RHSA-2003-029.html
• http://www.redhat.com/support/errata/RHSA-2003-030.html
• http://www.securityfocus.com/bid/5499
• http://www.trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt
• http://marc.info/?l=bugtraq&m=102978118411977&w=2
• http://marc.info/?l=bugtraq&m=103003793418021&w=2
• http://www.debian.org/security/2002/dsa-210Patch, Vendor Advisory
• http://www.iss.net/security_center/static/9887.phpPatch, Vendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:023
• http://www.redhat.com/support/errata/RHSA-2003-029.html
• http://www.redhat.com/support/errata/RHSA-2003-030.html
• http://www.securityfocus.com/bid/5499
• http://www.trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt

Published

Feb 19, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1399Unknown vulnerability in cash_out and possibly other functio…
• CVE-2002-1400Heap-based buffer overflow in the repeat() function for Post…
• CVE-2002-1401Buffer overflows in (1) circle_poly, (2) path_encode and (3)…
• CVE-2002-1402Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivron…
• CVE-2002-1403dhcpcd DHCP client daemon 1.3.22 and earlier allows local us…
• CVE-2002-1404Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2002-1406Unknown vulnerability in passwd for VVOS HP-UX 11.04, with u…
• CVE-2002-1407TinySSL 1.02 and earlier does not verify the Basic Constrain…
• CVE-2002-1408Unknown vulnerability or vulnerabilities in HP OpenView EMAN…
• CVE-2002-1409ptrace on HP-UX 11.00 through 11.11 allows local users to ca…
• CVE-2002-1410Easy Guestbook CGI programs do not authenticate the administ…
• CVE-2002-1411Directory traversal vulnerability in update.dpgs in Duma Pho…