PT-2004-2038 · Freebsd · Freebsd

Published 2004-11-24 · Updated 2017-07-11 · CVE-2004-1053

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.1 through 5.3

Description: The issue is related to an integer overflow in the fetch function, which can be exploited by remote malicious servers. This exploitation can occur via certain HTTP headers in an HTTP response, leading to a buffer overflow and potentially allowing the execution of arbitrary code.

Recommendations: For FreeBSD versions 4.1 through 5.3, update to a version that includes a fix for the integer overflow in the fetch function to prevent remote code execution.

Fix

Related Identifiers

CVE-2004-1053

Affected Products

Freebsd

References · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1053 · Security Note
• http://securityfocus.com/bid/11702 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18160 · Note