critical9.4Public exploit code
CVE-2002-2268
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kolibri HTTP Server 2.0 - HEAD Buffer Overflow (Metasploit)2011-08-03 · remote · windows · Verified
- Webster HTTP Server - GET Buffer Overflow (Metasploit)2010-11-03 · remote · windows · Verified
Impact
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netdave | Webster Http Server | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2002/Dec/0013.html
- http://www.securiteam.com/windowsntfocus/6R0030A6AY.html
- http://www.securityfocus.com/bid/6289
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10727
- http://seclists.org/lists/bugtraq/2002/Dec/0013.html
- http://www.securiteam.com/windowsntfocus/6R0030A6AY.html
- http://www.securityfocus.com/bid/6289
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10727