Lucene search
HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1262
cve-2003-1262
buffer overflow
http fetcher
denial of service
remote code execution
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
8.4 High
AI Score
Confidence
High
0.069 Low
EPSS
Percentile
93.9%
Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
Affected configurations
Node
http_fetcherhttp_fetcher_libraryMatch1.0.0
ORhttp_fetcherhttp_fetcher_libraryMatch1.0.1
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
8.4 High
AI Score
Confidence
High
0.069 Low
EPSS
Percentile
93.9%
Related for CVE-2003-1262