Lucene search
HistoryOct 14, 2007 - 8:00 p.m.
CVE-2002-2257
cve-2002-2257
buffer overflow
parse_field
cgi_lib.c
libcgi
remote code execution
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.5 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.
Affected configurations
Node
tuxbrlibcgiMatch1.0.2
ORtuxbrlibcgiMatch1.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| tuxbr:libcgi | tuxbr libcgi | eq | 1.0.2 |
| tuxbr:libcgi | tuxbr libcgi | eq | 1.0.3 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.5 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2002-2257