CVE

Id
8884  
CVE No.
CVE-2004-0456  
Status
Candidate  
Description
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.  
Phase
Assigned (20040506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56709 8884 CVE-2004-0456 FULLDISC:20040702 pavuk buffer overflow  View
56710 8884 CVE-2004-0456 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html  View
56711 8884 CVE-2004-0456 DEBIAN:DSA-527  View
56712 8884 CVE-2004-0456 URL:http://www.debian.org/security/2004/dsa-527  View
56713 8884 CVE-2004-0456 GENTOO:GLSA-200406-22  View
56714 8884 CVE-2004-0456 URL:http://security.gentoo.org/glsa/glsa-200406-22.xml  View
56715 8884 CVE-2004-0456 BID:10633  View
56716 8884 CVE-2004-0456 URL:http://www.securityfocus.com/bid/10633  View
56717 8884 CVE-2004-0456 XF:pavuk-location-bo(16551)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63105 JVNDB-2004-000447 MySQL における Mysqlhotcopy スクリプトによるシンボリックリンク攻撃を受ける脆弱性 MySQL には、mysqlhotcopy スクリプトで scp メソッドを使用した場合にセキュリティ上不適切な方法で一時ファイルを作成してしまう不備のため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-0457 8884 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000447.html  View