Lucene search

MitreCVE-2005-0608

HistoryMar 01, 2005 - 5:00 a.m.

CVE-2005-0608

2005-03-0105:00:00

mitre

web.nvd.nist.gov

cve

2005

0608

webmod

buffer overflow

denial of service

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

High

EPSS

0.023

Percentile

89.7%

JSON

Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent.

Affected configurations

Nvd

Node

webmodwebmodMatch0.47

VendorProductVersionCPE
webmodwebmod0.47cpe:2.3:a:webmod:webmod:0.47:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webmod	webmod	0.47	cpe:2.3:a:webmod:webmod:0.47:::::::*

References

djeyl.net/forum/index.php?showtopic=41440

secunia.com/advisories/14302

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

High

EPSS

0.023

Percentile

89.7%

JSON

Related for CVE-2005-0608