7.5
CVSSv2

CVE-2003-0651

Published: 27/08/2003 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and previous versions allows remote malicious users to execute arbitrary code via a long HTTP GET request.

Vulnerable Product Search on Vulmon Subscribe to Product

mod mylo mod mylo 0.1

mod mylo mod mylo 2.0

mod mylo mod mylo 2.1

Exploits

/* Apache + mod_mylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot com Public release - Linux and FreeBSD targets */ #include <sys/typesh> #include <sys/stath> #include <sys/socketh> #include <net/ifh> #include <netinet/inh> #include <netinet/tcph> #include <arpa/ineth> # ...