CVE-2004-1303

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-01-10

Last modified

2024-08-08

Affected products

• Yanf (Yanf)

References

• http://tigger.uic.edu/~jlongs2/holes/yanf.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18615