Lucene search
HistoryDec 06, 2004 - 5:00 a.m.
CVE-2004-0456
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.007
Percentile
80.3%
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
Affected configurations
Node
pavukpavukMatch0.9pl28i
ORpavukpavukMatch0.928r1
Node
debiandebian_linuxMatch3.0
ORdebiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
ORgentoolinuxMatch1.1a
ORgentoolinuxMatch1.2
ORgentoolinuxMatch1.4
ORgentoolinuxMatch1.4rc1
ORgentoolinuxMatch1.4rc2
ORgentoolinuxMatch1.4rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pavuk | pavuk | 0.9pl28i | cpe:2.3:a:pavuk:pavuk:0.9pl28i:*:*:*:*:*:*:* |
| pavuk | pavuk | 0.928r1 | cpe:2.3:a:pavuk:pavuk:0.928r1:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:* |
Related
nessus
nessus
GLSA-200406-22 : Pavuk: Remote buffer overflow
2004-08-30 00:00:00
FreeBSD : Pavuk HTTP Location header overflow (137)
2004-07-06 00:00:00
debiancve
debiancve
CVE-2004-0456
2004-12-06 05:00:00
openvas
openvas
Debian: Security Advisory (DSA-527)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200411-19 (pavuk)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200406-22 (Pavuk)
2008-09-24 00:00:00
freebsd
freebsd
Pavuk HTTP Location header overflow
2004-06-30 00:00:00
gentoo
gentoo
Pavuk: Multiple buffer overflows
2004-11-10 00:00:00
Pavuk: Remote buffer overflow
2004-06-30 00:00:00
securityvulns
securityvulns
[ GLSA 200411-19 ] Pavuk: Multiple buffer overflows
2004-11-13 00:00:00
cvelist
cvelist
CVE-2004-0456
2004-07-06 04:00:00
cve
cve
CVE-2004-0456
2004-12-06 05:00:00
debian
debian
[SECURITY] [DSA 527-1] New pavuk packages fix buffer overflow
2004-07-03 19:10:05
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.007
Percentile
80.3%
Related for NVD:CVE-2004-0456