high7.5Public exploit code
CVE-2001-0820
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ghttpd 1.4.x - 'Log()' Remote Buffer Overflow2002-10-07 · remote · linux · Verified
- ghttpd 1.4 - Daemon Buffer Overflow2001-06-17 · remote · linux · Verified
Impact
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gaztek | Ghttp | Version 1.4 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=99279182704674&w=2
- http://marc.info/?l=bugtraq&m=99406263214417&w=2
- http://www.securityfocus.com/bid/2879
- http://www.securityfocus.com/bid/2965
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6702
- http://marc.info/?l=bugtraq&m=99279182704674&w=2
- http://marc.info/?l=bugtraq&m=99406263214417&w=2
- http://www.securityfocus.com/bid/2879
- http://www.securityfocus.com/bid/2965
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6702