PT-2001-1989 · Gaztek · Gaztek Ghttpd

Published 2001-11-22 · Updated 2017-12-19 · CVE-2001-0820

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GazTek ghttpd version 1.4

Description The issue allows a remote attacker to execute arbitrary code via long arguments passed to certain functions. Specifically, buffer overflows can occur in the Log function in util.c or the serveconnection function in protocol.c.

Recommendations For GazTek ghttpd version 1.4, consider disabling the Log function in util.c and the serveconnection function in protocol.c until a patch is available to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0820

Affected Products

Gaztek Ghttpd

References · 8

• 🔥 https://exploit-db.com/exploits/21937 · Exploit
• 🔥 http://securityfocus.com/bid/2879 · Exploit
• 🔥 https://exploit-db.com/exploits/20929 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0820 · Security Note
• http://marc.info/?l=bugtraq&m=99406263214417&w=2 · Note
• http://securityfocus.com/bid/2965 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6702 · Note
• http://marc.info/?l=bugtraq&m=99279182704674&w=2 · Note