Vulnerability in Apache HTTP Server
CVE-2005-1344
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
EPSS: 0.291 (98.0th percentile) — read the EPSS interpretation.
Affected products
- Apache Http_server — versions 2.0.52
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (vdb-entry, x_refsource_BID)