critical10.0Public exploit code
CVE-2004-1303
Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yanf 0.4 - HTTP Response Buffer Overflow2004-12-15 · remote · multiple · Verified
Impact
Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yanf | Yanf | Version 0.4 |