PT-2002-1108 · Crazywwwboard · Crazywwwboard

Published 2002-01-30 · Updated 2017-07-11 · CVE-2001-1457

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CrazyWWWBoard versions 2000p4 and 2000LEp5

Description The issue allows remote attackers to execute arbitrary code via a long HTTP USER AGENT CGI environment variable. This is a result of a buffer overflow.

Recommendations For CrazyWWWBoard version 2000p4, update or patch the software to fix the buffer overflow issue. For CrazyWWWBoard version 2000LEp5, update or patch the software to fix the buffer overflow issue. As a temporary workaround, consider restricting the length of the HTTP USER AGENT variable to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1457

Affected Products

Crazywwwboard

References · 4

• 🔥 http://securityfocus.com/archive/1/173050 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1457 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10110 · Note
• http://kb.cert.org/vuls/id/229955 · Note