CVE-2004-0455 Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
HighCVSS 7.2
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| www-sql project www-sql | < 0.5.7 | 0.5.7 |
| debian linux | = 3.0 | No fix listed |
References
- DSA-523 third-party-advisory vendor-advisory
- 10577 third-party-advisory vdb-entry
- wwwsql-cgi-command-execution(16455) third-party-advisory vdb-entry