PT-2003-2173 · Mathopd · Mathopd

Michiel Boland · Published 2003-12-31 · Updated 2021-06-01 · CVE-2003-1228

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mathopd versions 1.2 through 1.5b13

Description A buffer overflow issue exists in the prepare reply function in request.c, which can be triggered by a remote attacker sending an HTTP request with a long path. This can cause a denial of service (server crash) and potentially allow the execution of arbitrary code.

Recommendations For Mathopd versions 1.2 through 1.5b13, consider disabling the prepare reply function in request.c as a temporary workaround until a patch is available. Restrict access to the server to minimize the risk of exploitation.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2003-1228

Affected Products

Mathopd

References · 9

• 🔥 http://securiteam.com/unixfocus/5FP0C1FCAW.html · Exploit
• 🔥 https://exploit-db.com/exploits/23811 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1228 · Security Note
• http://secunia.com/advisories/10385 · Note
• http://marc.info/?l=bugtraq&m=107090601705839&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15474 · Note
• http://securityfocus.com/bid/9871 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1228 · Note
• http://marc.info/?l=bugtraq&m=107064887507504&w=2 · Note