CVE-2003-1228

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.

Ссылки

http://marc.info/?l=bugtraq&m=107064887507504&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=107090601705839&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://secunia.com/advisories/10385/
Third Party Advisory
http://www.securiteam.com/unixfocus/5FP0C1FCAW.html
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/9871
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15474
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=107064887507504&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=107090601705839&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://secunia.com/advisories/10385/
Third Party Advisory
http://www.securiteam.com/unixfocus/5FP0C1FCAW.html
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/9871
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15474
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mathopd:mathopd:*:*:*:*:*:*:*:*

Версия от 1.2 (включая) до 1.5 (исключая)

cpe:2.3:a:mathopd:mathopd:1.5:-:*:*:*:*:*:*

cpe:2.3:a:mathopd:mathopd:1.5:beta13:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12374

Средний

7.5 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2003-1228

debian

больше 21 года назад

Buffer overflow in the prepare_reply function in request.c for Mathopd ...

GHSA-9c8p-6c5j-w6c4

github

больше 3 лет назад