VulnerabilityModified
CVE-2005-1344
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.
HIGH 7.5EPSS 29.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 29.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 29.10% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- apache/http server
- Source
- cve@mitre.org
References
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
- http://www.lucaercoli.it/advs/htdigest.txtExploit
- http://www.osvdb.org/12848Exploit
- http://www.securiteam.com/unixfocus/5EP061FEKC.htmlExploit
- http://www.securityfocus.com/bid/13537
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
- http://www.lucaercoli.it/advs/htdigest.txtExploit
- http://www.osvdb.org/12848Exploit
- http://www.securiteam.com/unixfocus/5EP061FEKC.htmlExploit
- http://www.securityfocus.com/bid/13537
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.