Lucene search

K
cve[email protected]CVE-2004-1303
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1303

2005-01-1005:00:00
NVD-CWE-Other
web.nvd.nist.gov
27
cve-2004-1303
buffer overflow
yanf 0.4
get.c
remote code execution
nvd

8.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

43.4%

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

CPENameOperatorVersion
yanf:yanfyanfeq0.4

8.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

43.4%

Related for CVE-2004-1303