NVD

Id
56846  
Name
CVE-2007-4727  
Description
Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows remote attackers to overwrite arbitrary CGI variables and execute arbitrary code via an HTTP request with a long content length, as demonstrated by overwriting the SCRIPT_FILENAME variable, aka a "header overflow."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-12  
Modified Date
2011-03-07  
Seq
2007-4727  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289932 56846 CVE-2007-4727 FEDORA-2007-2132  View
289933 56846 CVE-2007-4727 3127  View
289934 56846 CVE-2007-4727 http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/  View
289935 56846 CVE-2007-4727 http://trac.lighttpd.net/trac/changeset/1986  View
289936 56846 CVE-2007-4727 GLSA-200709-16  View
289937 56846 CVE-2007-4727 http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt  View
289938 56846 CVE-2007-4727 SUSE-SR:2007:020  View
289939 56846 CVE-2007-4727 20070917 FLEA-2007-0054-1 lighttpd  View
289940 56846 CVE-2007-4727 25622  View
289941 56846 CVE-2007-4727 ADV-2007-3110  View
289942 56846 CVE-2007-4727 lighttpd-modfastcgi-code-execution(36526)  View
289943 56846 CVE-2007-4727 https://bugzilla.redhat.com/show_bug.cgi?id=284511  View
289944 56846 CVE-2007-4727 https://issues.rpath.com/browse/RPL-1715  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55662 JVNDB-2007-004354 lighttpd の mod_fastcgi 拡張におけるバッファオーバーフローの脆弱性 lighttpd の mod_fastcgi 拡張の mod_proxy_backend_fastcgi.c の fcgi_env_add 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-4727 28082 CVE-2007-4727 56846 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004354.html 2007-09-12 2012-09-25 View