Lucene search

MitreCVE-2003-1558

HistoryMay 09, 2008 - 8:00 p.m.

CVE-2003-1558

2008-05-0920:00:00

CWE-119

mitre

web.nvd.nist.gov

buffer overflow

fnord 1.6

httpd.c

remote attackers

denial of service

execute arbitrary code

long cgi request

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.3

Confidence

High

EPSS

0.071

Percentile

94.0%

JSON

Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.

Affected configurations

Nvd

Node

fefefnordMatch1.6

VendorProductVersionCPE
fefefnord1.6cpe:2.3:a:fefe:fnord:1.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fefe	fnord	1.6	cpe:2.3:a:fefe:fnord:1.6:::::::*

References

secunia.com/advisories/7893

www.fefe.de/fnord/

www.securityfocus.com/archive/1/307400/30/26270/threaded

www.securityfocus.com/bid/6635

exchange.xforce.ibmcloud.com/vulnerabilities/11121

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.3

Confidence

High

EPSS

0.071

Percentile

94.0%

JSON

Related for CVE-2003-1558