7.6

CVE-2004-0456

Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pavuk ≫ Pavuk Version0.9pl28i
Pavuk ≫ Pavuk Version0.928r1
Debian ≫ Debian Linux Version3.0
Debian ≫ Debian Linux Version3.0 Editionalpha
Debian ≫ Debian Linux Version3.0 Editionarm
Debian ≫ Debian Linux Version3.0 Editionhppa
Debian ≫ Debian Linux Version3.0 Editionia-32
Debian ≫ Debian Linux Version3.0 Editionia-64
Debian ≫ Debian Linux Version3.0 Editionm68k
Debian ≫ Debian Linux Version3.0 Editionmips
Debian ≫ Debian Linux Version3.0 Editionmipsel
Debian ≫ Debian Linux Version3.0 Editionppc
Debian ≫ Debian Linux Version3.0 Editions-390
Debian ≫ Debian Linux Version3.0 Editionsparc
Gentoo ≫ Linux Version1.1a
Gentoo ≫ Linux Version1.2
Gentoo ≫ Linux Version1.4
Gentoo ≫ Linux Version1.4 Updaterc1
Gentoo ≫ Linux Version1.4 Updaterc2
Gentoo ≫ Linux Version1.4 Updaterc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.92% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html
http://security.gentoo.org/glsa/glsa-200406-22.xml
Patch
Vendor Advisory
http://www.debian.org/security/2004/dsa-527
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10633
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16551