Lucene search

[email protected]CVE-2006-2114

HistoryMay 01, 2006 - 7:06 p.m.

CVE-2006-2114

2006-05-0119:06:00

[email protected]

web.nvd.nist.gov

cve-2006-2114

buffer overflow

sws web server

remote attackers

arbitrary code

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request.

Affected configurations

NVD

Node

swssws_simple_web_serverMatch0.0.3

swssws_simple_web_serverMatch0.0.4

swssws_simple_web_serverMatch0.1

swssws_simple_web_serverMatch0.1.1

swssws_simple_web_serverMatch0.1.2

swssws_simple_web_serverMatch0.1.3

swssws_simple_web_serverMatch0.1.4

swssws_simple_web_serverMatch0.1.5

swssws_simple_web_serverMatch0.1.6

swssws_simple_web_serverMatch0.1.7

CPENameOperatorVersion
sws:sws_simple_web_serversws sws simple web servereq0.0.3
sws:sws_simple_web_serversws sws simple web servereq0.0.4
sws:sws_simple_web_serversws sws simple web servereq0.1
sws:sws_simple_web_serversws sws simple web servereq0.1.1
sws:sws_simple_web_serversws sws simple web servereq0.1.2
sws:sws_simple_web_serversws sws simple web servereq0.1.3
sws:sws_simple_web_serversws sws simple web servereq0.1.4
sws:sws_simple_web_serversws sws simple web servereq0.1.5
sws:sws_simple_web_serversws sws simple web servereq0.1.6
sws:sws_simple_web_serversws sws simple web servereq0.1.7

CPE	Name	Operator	Version
sws:sws_simple_web_server	sws sws simple web server	eq	0.0.3
sws:sws_simple_web_server	sws sws simple web server	eq	0.0.4
sws:sws_simple_web_server	sws sws simple web server	eq	0.1
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.1
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.2
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.3
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.4
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.5
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.6
sws:sws_simple_web_server	sws sws simple web server	eq	0.1.7

References

securityreason.com/securityalert/816

www.securityfocus.com/archive/1/432362/100/0/threaded

www.securityfocus.com/bid/17737

exchange.xforce.ibmcloud.com/vulnerabilities/26159

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

Related for CVE-2006-2114

cvelist1 prion1 nvd1