CVE-2005-1086 Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
MediumCVSS 6.4
EPSS 5.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| an-httpd | = 1.42n | No fix listed |
References
- 14861 third-party-advisory vendor-advisory
- 1013666 vdb-entry
- 15361 vdb-entry
- www.security.org.sg vendor-advisory
- 13066 exploit vdb-entry
- an-httpd-cmdisdll-bo(20029) vdb-entry