high7.5Public exploit code
CVE-2002-1930
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AN HTTPD 1.38/1.39/1.40/1.41 - 'SOCKS4' Buffer Overflow2002-10-21 · remote · windows · Verified
Impact
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| An | An-Httpd | Versions 1.38, 1.39, 1.40, 1.41, 1.41b, 1.41c |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0032.html
- http://www.iss.net/security_center/static/10410.php
- http://www.securityfocus.com/bid/6012
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0032.html
- http://www.iss.net/security_center/static/10410.php
- http://www.securityfocus.com/bid/6012