CVE

Id
9410  
CVE No.
CVE-2004-0982  
Status
Candidate  
Description
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.  
Phase
Assigned (20041024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62911 9410 CVE-2004-0982 BUGTRAQ:20041019 mpg123 "getauthfromurl" buffer overflow  View
62912 9410 CVE-2004-0982 URL:http://marc.info/?l=bugtraq&m=109834486312407&w=2  View
62913 9410 CVE-2004-0982 MISC:http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt  View
62914 9410 CVE-2004-0982 DEBIAN:DSA-578  View
62915 9410 CVE-2004-0982 URL:http://www.debian.org/security/2004/dsa-578  View
62916 9410 CVE-2004-0982 GENTOO:GLSA-200410-27  View
62917 9410 CVE-2004-0982 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml  View
62918 9410 CVE-2004-0982 BID:11468  View
62919 9410 CVE-2004-0982 URL:http://www.securityfocus.com/bid/11468  View
62920 9410 CVE-2004-0982 OSVDB:11023  View
62921 9410 CVE-2004-0982 URL:http://www.osvdb.org/11023  View
62922 9410 CVE-2004-0982 SECTRACK:1011832  View
62923 9410 CVE-2004-0982 URL:http://securitytracker.com/id?1011832  View
62924 9410 CVE-2004-0982 SECUNIA:12908  View
62925 9410 CVE-2004-0982 URL:http://secunia.com/advisories/12908  View
62926 9410 CVE-2004-0982 XF:mpg123-getauthfromurl-bo(17574)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63131 JVNDB-2004-000473 Ruby の cgi.rb における無限ループが発生する脆弱性 Ruby に含まれる CGI モジュール cgi.rb には入力値の妥当性が適切にチェックされない不備により、無限ループが発生する脆弱性が存在します。 CVE-2004-0983 9410 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000473.html  View