Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote malicious users to execute arbitrary code via an HTTP request with a long User-Agent header.
source: wwwsecurityfocuscom/bid/13066/info
AN HTTPD is reported prone to a remote buffer overflow vulnerability
Specifically, the issue presents itself in 'cmdISDLL' which calls the 'GetEnvironmentStrings' function to copy environment variables into a finite sized process buffer
The attacker can issue a malformed HTTP GET command inc ...
Vulmon