Lucene search

K
cve[email protected]CVE-2004-1053
HistoryMar 01, 2005 - 5:00 a.m.

CVE-2004-1053

2005-03-0105:00:00
web.nvd.nist.gov
21
cve-2004-1053
integer overflow
fetch
freebsd
remote code execution
http headers
buffer overflow
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.

Affected configurations

NVD
Node
freebsdfetch
CPENameOperatorVersion
freebsd:fetchfreebsd fetcheq*

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%