OSVDB ID: 1923

Title: NCSA HTTPd GET Request Remote Overflow

Info

Disclosure
Feb 13, 1995

Discovery
Unknown

Dates

Exploit
Feb 13, 1995

Solution
Unknown

Description

 A remote overflow exists in NCSA HTTPd. The daemon fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted URL request containing 256 or more characters, a remote attacker can cause arbitrary command execution resulting in a loss of integrity.

Classification

 Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

NCSA HTTPd Development Team

NCSA HTTPd

 1.3
1.2
1.1

References

Credit
  • Thomas Lopatic - lopaticBrand New Doo Doodbs.informatik.uni-muenchen.de -


Direct URL: http://osvdb.org/36218