NVD

Id
9620  
Name
CVE-2011-2900  
Description
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-05  
Modified Date
2011-09-22  
Seq
2011-2900  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54962 9620 CVE-2011-2900 FEDORA-2011-11636  View
54963 9620 CVE-2011-2900 FEDORA-2011-11823  View
54964 9620 CVE-2011-2900 FEDORA-2011-11825  View
54965 9620 CVE-2011-2900 8337  View
54966 9620 CVE-2011-2900 [oss-security] 20110803 CVE id request: shttpd/mongoose/yassl embedded webserver  View
54967 9620 CVE-2011-2900 [oss-security] 20110803 Re: CVE id request: shttpd/mongoose/yassl embedded webserver  View
54968 9620 CVE-2011-2900 48980  View
54969 9620 CVE-2011-2900 mongoose-put-bo(68991)  View
54970 9620 CVE-2011-2900 https://code.google.com/p/mongoose/source/detail?r=556f4de91eae4bac40dc5d4ddbd9ec7c424711d0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34587 JVNDB-2011-004829 Mongoose などの put_dir 関数におけるスタックベースのバッファオーバーフローの脆弱性 (1) Mongoose の mongoose.c の put_dir 関数、(2) yaSSL Embedded Web Server (yasslEWS) の yasslEWS.c のput_dir 関数および (3) Simple HTTPD (shttpd) の io_dir.c の _shttpd_put_dir 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-2900 50807 CVE-2011-2900 9620 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004829.html 2011-08-05 2012-03-27 View