CVE-2004-1053 Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd fetch | All versions | No fix listed |
References
- 11702 patch vdb-entry vendor-advisory
- fetch-http-header-bo(18160) vdb-entry