high7.5Public exploit code
CVE-2005-4270
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Watchfire AppScan QA 5.0.x - Remote Code Execution2005-12-15 · remote · windows · Verified
Impact
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchfire | Appscan Qa | Versions 5.0.134, 5.0.609 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18013
- http://securityreason.com/securityalert/260
- http://securitytracker.com/id?1015362
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf
- http://www.securityfocus.com/archive/1/419586/100/0/threaded
- http://www.securityfocus.com/bid/15873
- http://www.vupen.com/english/advisories/2005/2933
- http://secunia.com/advisories/18013
- http://securityreason.com/securityalert/260
- http://securitytracker.com/id?1015362
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf
- http://www.securityfocus.com/archive/1/419586/100/0/threaded
- http://www.securityfocus.com/bid/15873
- http://www.vupen.com/english/advisories/2005/2933