Lucene search
UbuntuUSN-120-1HistoryMay 06, 2005 - 12:00 a.m.
Apache 2 vulnerability
2005-05-0600:00:00
ubuntu.com
34
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.004
Percentile
73.7%
Releases
- Ubuntu 5.04
- Ubuntu 4.10
Details
Luca Ercoli discovered that the “htdigest” program did not perform any
bounds checking when it copied the “user” and “realm” arguments into
local buffers. If this program is used in remotely callable CGI
scripts, this could be exploited by a remote attacker to execute
arbitrary code with the privileges of the CGI script.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 5.04 | noarch | apache2-utils | < * | UNKNOWN |
| Ubuntu | 4.10 | noarch | apache2-utils | < * | UNKNOWN |
References
Related
cve
cve
CVE-2005-1344
2005-05-02 04:00:00
nessus
nessus
Ubuntu 4.10 / 5.04 : apache2 vulnerability (USN-120-1)
2006-01-15 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2005-005)
2005-05-03 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2005-007)
2005-08-18 00:00:00
cvelist
cvelist
CVE-2005-1344
2005-04-27 04:00:00
redhatcve
redhatcve
CVE-2005-1344
2015-10-30 10:17:55
debiancve
debiancve
CVE-2005-1344
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-1344
2005-05-02 00:00:00
nvd
nvd
CVE-2005-1344
2005-05-02 04:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.004
Percentile
73.7%
Related for USN-120-1