CVE-2013-7299

CVE-2013-7299 is a sensitive information disclosure vulnerability affecting Tntnet versions prior to 2.2.1. A remote attacker can exploit a flaw in the message header parsing, specifically when a header ends with a newline character (\n) instead of a carriage return and newline (\r\n), to prevent proper null termination. This leads to the inclusion of headers from other requests in the response, exposing potentially sensitive data. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is a network-based attack with low complexity and requires no authentication, resulting in a partial confidentiality impact (C:P). There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public attention.