VulnerabilityModified

CVE-2003-1247

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.

HIGH 7.5EPSS 9.95%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (9.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 9.95% probability · 95th percentile
CISA KEV: Not listed
Affected: positive software/h-sphere
Source: cve@mitre.org

References

http://psoft.net/misc/webshell_patch.htmlPatch
http://secunia.com/advisories/7832
http://www.iss.net/security_center/static/10999.phpPatch
http://www.iss.net/security_center/static/11002.phpPatch
http://www.iss.net/security_center/static/11003.phpPatch
http://www.securityfocus.com/archive/1/305313Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6527
http://www.securityfocus.com/bid/6537Patch
http://www.securityfocus.com/bid/6538Patch
http://www.securityfocus.com/bid/6540Patch
http://www.securitytracker.com/id?1005893
http://psoft.net/misc/webshell_patch.htmlPatch
http://secunia.com/advisories/7832
http://www.iss.net/security_center/static/10999.phpPatch
http://www.iss.net/security_center/static/11002.phpPatch
http://www.iss.net/security_center/static/11003.phpPatch
http://www.securityfocus.com/archive/1/305313Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6527
http://www.securityfocus.com/bid/6537Patch
http://www.securityfocus.com/bid/6538Patch
http://www.securityfocus.com/bid/6540Patch
http://www.securitytracker.com/id?1005893

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.