CVE-2005-1344
CVE-2005-1344
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
EPSS 29,1% · Código de explotación público · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
apache2 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.0.54-3
Actualiza a 2.0.54-3
apache2 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.0.54-3
Actualiza a 2.0.54-3
apache2 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.0.54-3
Actualiza a 2.0.54-3
Fuentes originales
- http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
- http://www.lucaercoli.it/advs/htdigest.txt
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://www.osvdb.org/12848
- http://www.securiteam.com/unixfocus/5EP061FEKC.html
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://www.securityfocus.com/bid/13537
- https://nvd.nist.gov/vuln/detail/CVE-2005-1344