NVD

Id
2559  
Name
CVE-2008-2654  
Description
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-13  
Modified Date
2011-03-07  
Seq
2008-2654  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16053 2559 CVE-2008-2654 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572  View
16054 2559 CVE-2008-2654 [oss-security] 20080610 exploitability of off-by-one in motion webserver  View
16055 2559 CVE-2008-2654 [oss-security] 20080610 Re: exploitability of off-by-one in motion webserver  View
16056 2559 CVE-2008-2654 [oss-security] 20080611 Re: exploitability of off-by-one in motion webserver  View
16057 2559 CVE-2008-2654 [oss-security] 20080611 Re: exploitability of off-by-one in motion webserver  View
16058 2559 CVE-2008-2654 GLSA-200807-02  View
16059 2559 CVE-2008-2654 http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttpd-security.diff  View
16060 2559 CVE-2008-2654 http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd-security-video2-backport.diff  View
16061 2559 CVE-2008-2654 29636  View
16062 2559 CVE-2008-2654 ADV-2008-1796  View
16063 2559 CVE-2008-2654 motion-readclient-bo(42979)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49222 JVNDB-2008-004532 Motion の webhttpd.c の read_client 関数における任意のコードを実行される脆弱性 Motion の webhttpd.c の read_client 関数は、一づれエラーが発生するため、任意のコードを実行される脆弱性が存在します。 CVE-2008-2654 32767 CVE-2008-2654 2559 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004532.html 2008-06-10 2012-09-25 View