CVE-2002-1575

CVE-2002-1575 describes a CRLF injection vulnerability in MIT cgiemail, allowing remote attackers to use it as a spam proxy. By injecting encoded newline characters (%0a) into parameters like "required-subject," attackers can modify email headers such as CC and BCC. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial integrity impact. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, with 10 mentions across various platforms.