CVE-2001-0173

Опубликовано: 03 мая 2001

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/2329
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6033
http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/2329
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6033

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nobreak_technologies:crazywwwboard:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:98:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:98pe:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:2000.0lepx:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:2000.0px:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:2000lepx:*:*:*:*:*:*:*

cpe:2.3:a:nobreak_technologies:crazywwwboard:2000px:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:4.0:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:4.3:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:4.3.1:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:5.0:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:qdecoder:qdecoder:5.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04061

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3j83-v84m-h6f2

github

почти 4 года назад