Lucene search

[email protected]CVE-2001-0173

HistoryMay 03, 2001 - 4:00 a.m.

CVE-2001-0173

2001-05-0304:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0173

qdecoder library

buffer overflow

remote attacker

command execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Affected configurations

NVD

Node

nobreak_technologiescrazywwwboardMatch3.0.1

nobreak_technologiescrazywwwboardMatch98

nobreak_technologiescrazywwwboardMatch98pe

nobreak_technologiescrazywwwboardMatch2000.0lepx

nobreak_technologiescrazywwwboardMatch2000.0px

nobreak_technologiescrazywwwboardMatch2000lepx

nobreak_technologiescrazywwwboardMatch2000px

qdecoderqdecoderMatch4.0

qdecoderqdecoderMatch4.0.1

qdecoderqdecoderMatch4.3

qdecoderqdecoderMatch4.3.1

qdecoderqdecoderMatch5.0

qdecoderqdecoderMatch5.0.1

qdecoderqdecoderMatch5.0.2

qdecoderqdecoderMatch5.0.3

CPENameOperatorVersion
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq3.0.1
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq98
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq98pe
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq2000.0lepx
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq2000.0px
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq2000lepx
nobreak_technologies:crazywwwboardnobreak technologies crazywwwboardeq2000px
qdecoder:qdecoderqdecodereq4.0
qdecoder:qdecoderqdecodereq4.0.1
qdecoder:qdecoderqdecodereq4.3

CPE	Name	Operator	Version
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	3.0.1
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	98
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	98pe
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	2000.0lepx
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	2000.0px
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	2000lepx
nobreak_technologies:crazywwwboard	nobreak technologies crazywwwboard	eq	2000px
qdecoder:qdecoder	qdecoder	eq	4.0
qdecoder:qdecoder	qdecoder	eq	4.0.1
qdecoder:qdecoder	qdecoder	eq	4.3

Rows per page:

1-10 of 151

References

archives.neohapsis.com/archives/bugtraq/2001-01/0486.html

www.securityfocus.com/bid/2329

exchange.xforce.ibmcloud.com/vulnerabilities/6033

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Related for CVE-2001-0173

nvd1 cvelist1