CVE-2002-1816 Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CriticalCVSS 9.8
EPSS 9.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redshift atphttpd | <= 0.4b | No fix listed |
References
- 20021012 Pyramid Research Project - atphttpd security advisorie broken-link exploit mailing-list vendor-advisory
- 7293 broken-link third-party-advisory vendor-advisory
- atphttpd-sockgets-bo(10362) broken-link vdb-entry
- 5956 broken-link exploit patch third-party-advisory vdb-entry