CVE-2008-5730: Netcat

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file.

Affected products

• Netcat Netcat: up to and including 3.12; version 1.1 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; …

Published 2008-12-26. Last modified 2026-06-16.