NVD

Id
67083  
Name
CVE-2005-1344  
Description
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2008-09-10  
Seq
2005-1344  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
348164 67083 CVE-2005-1344 APPLE-SA-2005-08-17  View
348165 67083 CVE-2005-1344 APPLE-SA-2005-08-15  View
348166 67083 CVE-2005-1344 APPLE-SA-2005-05-03  View
348167 67083 CVE-2005-1344 http://www.lucaercoli.it/advs/htdigest.txt  View
348168 67083 CVE-2005-1344 http://www.securiteam.com/unixfocus/5EP061FEKC.html  View
348169 67083 CVE-2005-1344 13537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61802 JVNDB-2005-000004 Apache HTTP Server の htdigest コマンドにおけるバッファオーバーフローの脆弱性 Apache HTTP Server の htdigest ユーティリティには、コマンド引数として指定された user および realm の妥当性のチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-1344 12548 CVE-2005-1344 67083 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000004.html 2005-01-05 2007-04-01 View