CVE-2004-1120

2005-01-1005:00:00

[email protected]

web.nvd.nist.gov

buffer overflow

network protocol

prozilla

remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.6%

JSON

Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.

Affected configurations

NVD

Node

prozillaprozilla_download_acceleratorMatch1.0.0

prozillaprozilla_download_acceleratorMatch1.3.0

prozillaprozilla_download_acceleratorMatch1.3.1

prozillaprozilla_download_acceleratorMatch1.3.2

prozillaprozilla_download_acceleratorMatch1.3.3

prozillaprozilla_download_acceleratorMatch1.3.4

prozillaprozilla_download_acceleratorMatch1.3.5

prozillaprozilla_download_acceleratorMatch1.3.5.1

prozillaprozilla_download_acceleratorMatch1.3.5.2

prozillaprozilla_download_acceleratorMatch1.3.6

CPENameOperatorVersion
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.0.0
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.0
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.1
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.2
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.3
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.4
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.5
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.5.1
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.5.2
prozilla:prozilla_download_acceleratorprozilla prozilla download acceleratoreq1.3.6

CPE	Name	Operator	Version
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.0.0
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.0
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.1
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.2
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.3
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.4
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.5
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.5.1
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.5.2
prozilla:prozilla_download_accelerator	prozilla prozilla download accelerator	eq	1.3.6