NVD

Id
59800  
Name
CVE-2006-1078  
Description
Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-08  
Modified Date
2016-10-17  
Seq
2006-1078  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307609 59800 CVE-2006-1078 20040916 FlowSecurity.org: Local Stack Overflow on htpasswd apache 1.3.31 advsory.  View
307610 59800 CVE-2006-1078 http://issues.apache.org/bugzilla/show_bug.cgi?id=31975  View
307611 59800 CVE-2006-1078 http://issues.apache.org/bugzilla/show_bug.cgi?id=41279  View
307612 59800 CVE-2006-1078 20070102 Apache 1.3.37 htpasswd buffer overflow vulnerability  View
307613 59800 CVE-2006-1078 [thttpd] 20060305 htpasswd.c security issues  View
307614 59800 CVE-2006-1078 [thttpd] 20060305 Re: htpasswd.c security issues  View
307615 59800 CVE-2006-1078 20041029 Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?  View
307616 59800 CVE-2006-1078 20041029 Apache 1.3.33 local buffer overflow in apache 1.3.31 not fixed in .33?  View
307617 59800 CVE-2006-1078 20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.  View
307618 59800 CVE-2006-1078 16972  View
307619 59800 CVE-2006-1078 thttpd-command-file-bo(25216)  View
307620 59800 CVE-2006-1078 apache-htpasswd-strcpy-bo(31236)  View

Related JVN