LibHTTPD POST Buffer Overflow Vulnerability
BID:6172
Info
LibHTTPD POST Buffer Overflow Vulnerability
| Bugtraq ID: | 6172 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 13 2002 12:00AM |
| Updated: | Nov 13 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to "dong-h0un U" <[email protected]>. |
| Vulnerable: |
Hughes Technologies libHTTPD 1.2 |
| Not Vulnerable: |
Hughes Technologies libHTTPD 1.3 |
Exploit / POC
LibHTTPD POST Buffer Overflow Vulnerability
An exploit has been written by "you dong-hun"(Xpl017Elz), <[email protected]>.
An exploit has been written by "you dong-hun"(Xpl017Elz), <[email protected]>.
Solution / Fix
LibHTTPD POST Buffer Overflow Vulnerability
Solution:
An unofficial patch has been made available by "you dong-hun"(Xpl017Elz), <[email protected]>.
The vendor has released a new version of libHTTPD which addresses the issue. Users are advised to upgrade as soon as possible.
Hughes Technologies libHTTPD 1.2
Solution:
An unofficial patch has been made available by "you dong-hun"(Xpl017Elz), <[email protected]>.
The vendor has released a new version of libHTTPD which addresses the issue. Users are advised to upgrade as soon as possible.
Hughes Technologies libHTTPD 1.2
-
Hughes Technologies libHTTPD v1.3
http://www.hughes.com.au/products/libhttpd/libhttpd-1.3.tar.gz -
INetCop Security libhttpd.patch
http://downloads.securityfocus.com/vulnerabilities/patches/libhttpd.pa tch
References
LibHTTPD POST Buffer Overflow Vulnerability
References:
References:
- libHTTPD Product Page (Hughes Technologies)
- LibHTTPD Vulnerability and fix ("David J. Hughes"
) - Remote Buffer Overflow vulnerability in Lib HTTPd. ("dong-h0un U"
)