CVE

Id
12550  
CVE No.
CVE-2005-1344  
Status
Candidate  
Description
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.  
Phase
Assigned (20050427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
90339 12550 CVE-2005-1344 MISC:http://www.lucaercoli.it/advs/htdigest.txt  View
90340 12550 CVE-2005-1344 APPLE:APPLE-SA-2005-05-03  View
90341 12550 CVE-2005-1344 URL:http://lists.apple.com/archives/security-announce/2005/May/msg00001.html  View
90342 12550 CVE-2005-1344 APPLE:APPLE-SA-2005-08-15  View
90343 12550 CVE-2005-1344 URL:http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html  View
90344 12550 CVE-2005-1344 APPLE:APPLE-SA-2005-08-17  View
90345 12550 CVE-2005-1344 URL:http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html  View
90346 12550 CVE-2005-1344 MISC:http://www.securiteam.com/unixfocus/5EP061FEKC.html  View
90347 12550 CVE-2005-1344 BID:13537  View
90348 12550 CVE-2005-1344 URL:http://www.securityfocus.com/bid/13537  View
90349 12550 CVE-2005-1344 OSVDB:12848  View

Related JVN