Vulnerability in Whois

CVE-2003-0709

Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.

Affected products

  • Whois — versions 4.5.7, 4.6.6
  • N/a — versions n/a

References

  • cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)