Lucene search
MitreCVE-2003-1262HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1262
2005-11-1607:37:00
mitre
web.nvd.nist.gov
28
cve-2003-1262
buffer overflow
http fetcher
denial of service
remote code execution
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
8.4
Confidence
High
EPSS
0.069
Percentile
93.9%
Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
Affected configurations
Node
http_fetcherhttp_fetcher_libraryMatch1.0.0
ORhttp_fetcherhttp_fetcher_libraryMatch1.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| http_fetcher | http_fetcher_library | 1.0.0 | cpe:2.3:a:http_fetcher:http_fetcher_library:1.0.0:*:*:*:*:*:*:* |
| http_fetcher | http_fetcher_library | 1.0.1 | cpe:2.3:a:http_fetcher:http_fetcher_library:1.0.1:*:*:*:*:*:*:* |
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
8.4
Confidence
High
EPSS
0.069
Percentile
93.9%
Related for CVE-2003-1262