Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 2.1 product line. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 82906

Summary: CRLF injection
Product: Red Hat Enterprise Linux 2.1 Reporter: Tim Waugh <twaugh>
Component: lynxAssignee: Tim Waugh <twaugh>
Status: CLOSED ERRATA QA Contact: Brian Brock <bbrock>
Severity: medium Docs Contact:
Priority: medium    
Version: 2.1Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://www.mail-archive.com/bugtraq@securityfocus.com/msg08897.html
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-02-21 08:43:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Better test case none

Description Tim Waugh 2003-01-28 11:34:58 UTC 
Description of problem:
lynx is vulnerable to CRLF injection:
http://www.mail-archive.com/bugtraq@securityfocus.com/msg08897.html

Version-Release number of selected component (if applicable):
2.8.4-17

How reproducible:
100%

Steps to Reproduce:
1. lynx "http://www.redhat.com HTTP/1.0
Host: www.microsoft.com

"
    
Actual results:
Microsoft's front page.

Expected results:
Invalid URL.

Additional info:
Comment 1 Tim Waugh 2003-02-12 17:00:49 UTC 
Created attachment 90035 [details]
Better test case

Use this test procedure instead.

1. ./test-lynx.sh
2. Examine output.  Fail if any of the numbered output lines are 'Host:
www.redhat.com' (the script will say 'FAIL' too).
Comment 3 Mark J. Cox 2003-02-21 08:43:24 UTC 
An errata has been issued which should help the problem described in this bug report. 
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen 
this bug report if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2003-030.html