PT-2001-1989 · Gaztek · Gaztek Ghttpd

Publicado 2001-11-22 · Atualizado 2017-12-19 · CVE-2001-0820

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GazTek ghttpd version 1.4

Description The issue allows a remote attacker to execute arbitrary code via long arguments passed to certain functions. Specifically, buffer overflows can occur in the Log function in util.c or the serveconnection function in protocol.c.

Recommendations For GazTek ghttpd version 1.4, consider disabling the Log function in util.c and the serveconnection function in protocol.c until a patch is available to prevent exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0820

Produtos afetados

Gaztek Ghttpd

Referências · 8

• 🔥 https://exploit-db.com/exploits/21937 · Exploit
• 🔥 http://securityfocus.com/bid/2879 · Exploit
• 🔥 https://exploit-db.com/exploits/20929 · Exploit
• http://marc.info/?l=bugtraq&m=99406263214417&w=2 · Nota
• http://securityfocus.com/bid/2965 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6702 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0820 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=99279182704674&w=2 · Nota