CVE-2009-1476

Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2009-05-26

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Ipfilter (Darren Reed)

References

• http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c
• http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h
• http://securityreason.com/achievement_securityalert/62
• http://www.securityfocus.com/bid/35076
• http://www.securitytracker.com/id?1022272
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50716