Lucene search

K
cve[email protected]CVE-2004-0456
HistoryDec 06, 2004 - 5:00 a.m.

CVE-2004-0456

2004-12-0605:00:00
NVD-CWE-Other
web.nvd.nist.gov
29
cve-2004-0456
pavuk
buffer overflow
remote code execution
security vulnerability

7.7 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.8%

Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.

7.7 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.8%