medium6.4Public exploit code
CVE-2005-1086
Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AN HTTPD - 'CMDIS.dll' Remote Buffer Overflow (PoC)2005-04-08 · dos · windows · Verified
Impact
Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| An | An-Httpd | Version 1.42n |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14861
- http://securitytracker.com/id?1013666
- http://www.osvdb.org/15361
- http://www.security.org.sg/vuln/anhttpd142n.html
- http://www.securityfocus.com/bid/13066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20029
- http://secunia.com/advisories/14861
- http://securitytracker.com/id?1013666
- http://www.osvdb.org/15361
- http://www.security.org.sg/vuln/anhttpd142n.html
- http://www.securityfocus.com/bid/13066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20029