CVE-2002-1489 Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
HighCVSS 7.5
EPSS 10.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| planetdns planetweb | <= 1.14 | No fix listed |
References
- 20020914 Planet Web Software Buffer Overflow mailing-list
- 20021017 New buffer overflow in plaetDNS exploit mailing-list vendor-advisory
- planetweb-long-url-bo(10124) patch vdb-entry vendor-advisory
- planetweb-long-url-bo(10391) vdb-entry vendor-advisory
- 5710 exploit vdb-entry vendor-advisory