CVE-2007-1713 Information

Description

CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211 and BASP21 Pro 1.0.702.27 and earlier allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.

Reference

http://jvn.jp/jp/JVN2386092776/index.html http://osvdb.org/34495 http://secunia.com/advisories/24652 http://www.hi-ho.ne.jp/babaq/basp21.html http://www.securityfocus.com/bid/23134 http://www.vupen.com/english/advisories/2007/1113 https://exchange.xforce.ibmcloud.com/vulnerabilities/33211