Описание
Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.14632
Средний
10 Critical
CVSS2
Дефекты
CWE-134
Связанные уязвимости
github
больше 4 лет назад
Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.
EPSS
Процентиль: 96%
0.14632
Средний
10 Critical
CVSS2
Дефекты
CWE-134