ID CVE-2002-0968
Summary Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
References
Vulnerable Configurations
  • cpe:2.3:a:analogx:simpleserver_www:-:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:-:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.01:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.01:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.03:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.03:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.04:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.04:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.05:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.05:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.06:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.06:*:*:*:*:*:*:*
  • cpe:2.3:a:analogx:simpleserver_www:1.16:*:*:*:*:*:*:*
    cpe:2.3:a:analogx:simpleserver_www:1.16:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 18-10-2016 - 02:23)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 5006
bugtraq
  • 20020613 Remote DoS in AnalogX SimpleServer:www 1.16
  • 20020702 Re: Remote DoS in AnlaogX SimpleServer:www 1.16
confirm http://www.analogx.com/contents/download/network/sswww.htm
osvdb 3780
xf analogx-simpleserver-at-dos(9338)
Last major update 18-10-2016 - 02:23
Published 04-10-2002 - 04:00
Last modified 18-10-2016 - 02:23
Back to Top