Pavuk HTTP Location header overflow

ID 76904DCE-CCF3-11D8-BABB-000854D03344
Type freebsd
Reporter FreeBSD
Modified 2004-06-30T00:00:00


When pavuk sends a request to a web server and the server sends back the HTTP status code 305 (Use Proxy), pavuk copies data from the HTTP Location header in an unsafe manner. This leads to a stack-based buffer overflow with control over EIP.