CVE-2018-19861

Опубликовано: 03 янв. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued.

Ссылки

http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/19
Exploit
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/45999/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/19
Exploit
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/45999/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:minishare_project:minishare:*:*:*:*:*:*:*:*

Версия до 1.4.1 (включая)

EPSS

Процентиль: 97%

0.31833

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-qwx3-29hm-fmh2