CVE-2003-1032 Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (cr...
MediumCVSS 5.0
EPSS 3.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pi3web | = 2.0.2_beta_1 | No fix listed |
References
- 20030602 Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web mailing-list
- 20030605 Re: Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web mailing-list
- 1006913 vdb-entry
- 7787 exploit patch vdb-entry vendor-advisory