Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2002-2295

Опубликовано: 31 дек. 2002
Источник: nvd
CVSS2: 7.5
EPSS Средний

Описание

Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pico_server:pico_server:2.0_beta_1:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:2.0_beta_2:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:2.0_beta_3:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:2.0_beta_5:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.2307
Средний

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.

EPSS

Процентиль: 96%
0.2307
Средний

7.5 High

CVSS2

Дефекты

CWE-119