CVE-2003-1247 Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname...
HighCVSS 7.5
EPSS 10.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| positive software h-sphere | = 2.3_rc3 | No fix listed |
References
- psoft.net patch
- 7832 third-party-advisory
- hsphere-webshell-readfile-bo(10999) patch vdb-entry
- hsphere-webshell-diskusage-bo(11002) patch vdb-entry
- hsphere-webshell-flist-bo(11003) patch vdb-entry
- 20030106 Remote root vuln in HSphere WebShell exploit mailing-list patch vendor-advisory
- 6527 vdb-entry
- 6537 patch vdb-entry
- 6538 patch vdb-entry
- 6540 patch vdb-entry
- 1005893 vdb-entry