Lucene search

[email protected]CVE-1999-1457

HistorySep 12, 2001 - 4:00 a.m.

CVE-1999-1457

2001-09-1204:00:00

[email protected]

web.nvd.nist.gov

cve-1999-1457

thttpd

http server

buffer overflow

remote attacker

arbitrary commands

date string

tdate_parse function.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.

Affected configurations

NVD

Node

thttpdthttpd_http_serverRange≤2.04

thttpdthttpd_http_serverRange≤2.04.31

thttpdthttpd_http_serverMatch1.90a

CPENameOperatorVersion
thttpd:thttpd_http_serverthttpd thttpd http serverle2.04
thttpd:thttpd_http_serverthttpd thttpd http serverle2.04.31
thttpd:thttpd_http_serverthttpd thttpd http servereq1.90a

CPE	Name	Operator	Version
thttpd:thttpd_http_server	thttpd thttpd http server	le	2.04
thttpd:thttpd_http_server	thttpd thttpd http server	le	2.04.31
thttpd:thttpd_http_server	thttpd thttpd http server	eq	1.90a

References

www.novell.com/linux/security/advisories/suse_security_announce_30.html

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

Related for CVE-1999-1457

cvelist1 nvd1