PT-2002-2538 · Atp · Atophttpd

Published 2002-12-31 · Updated 2025-01-16 · CVE-2002-1816

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ATPhttpd versions 0.4b and earlier

Description The issue is an off-by-one buffer overflow in the sock gets function in sockhelp.c, which allows remote attackers to execute arbitrary code via a long HTTP GET request.

Recommendations For ATPhttpd versions 0.4b and earlier, consider disabling the sock gets function in sockhelp.c to prevent exploitation until a patch is available. Restrict access to the ATPhttpd service to minimize the risk of exploitation. Avoid using long HTTP GET requests in the affected ATPhttpd versions until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2002-1816

Affected Products

Atophttpd

References · 8

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0187.html · Exploit
• 🔥 https://exploit-db.com/exploits/21936 · Exploit
• 🔥 http://securityfocus.com/bid/5956 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1816 · Security Note
• http://secunia.com/advisories/7293 · Vendor Advisory
• https://t.me/cvenotify/71667 · Telegram Post
• http://iss.net/security_center/static/10362.php · Note
• https://t.me/cvenotify/107687 · Telegram Post