CVE-2004-0455

CVE-2004-0455 describes a local buffer overflow in www-sql (cgi.c) that allows local users to execute arbitrary code via a crafted web page processed by www-sql. The issue affects www-sql versions prior to 0.5.7. Debian’s DSA-523-1 fixes the vulnerability in version 0.5.7-17woody1, with reference...