Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
References
| Link | Resource |
|---|---|
| http://www.pldaniels.com/altermime/CHANGELOG | Release Notes |
| http://www.securityfocus.com/bid/4650 | Broken Link Patch Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
15 Feb 2024, 21:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Pldaniels altermime
Pldaniels |
|
| CWE | CWE-193 | |
| References | (CONFIRM) http://www.pldaniels.com/altermime/CHANGELOG - Release Notes | |
| References | (BID) http://www.securityfocus.com/bid/4650 - Broken Link, Patch, Third Party Advisory, VDB Entry | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:paul_l_daniels:altermime:0.1.11:*:*:*:*:*:*:* |
cpe:2.3:a:pldaniels:altermime:0.1.10:*:*:*:*:*:*:* cpe:2.3:a:pldaniels:altermime:0.1.11:*:*:*:*:*:*:* |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
Information
Published : 2002-12-31 05:00
Updated : 2024-02-28 10:24
NVD link : CVE-2002-1721
Mitre link : CVE-2002-1721
CVE.ORG link : CVE-2002-1721
JSON object : View
Products Affected
pldaniels
- altermime
CWE
CWE-193
Off-by-one Error