Lucene search

K
nvd[email protected]NVD:CVE-2003-0842
HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0842

2003-11-1705:00:00
web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

High

EPSS

0.013

Percentile

85.8%

Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an “Accept-Encoding: gzip” header.

Affected configurations

NVD
Node
dag_apt_repositorymod_gzipMatch1.3.26.1a

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

High

EPSS

0.013

Percentile

85.8%

Related for NVD:CVE-2003-0842