Description
Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
References
- 20030107 GLSA: http-fetcher mailing-list
- http://www.iss.net/security_center/static/11000.php vdb-entry
- 6531 vdb-entry
- GLSA-200301-6 vendor-advisory
- 20030106 [INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library. mailing-list
- 7823 third-party-advisory