Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
References
Link | Resource |
---|---|
http://www.pldaniels.com/altermime/CHANGELOG | Release Notes |
http://www.securityfocus.com/bid/4650 | Broken Link Patch Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2002-12-31 05:00
Updated : 2024-02-15 21:13
NVD link : CVE-2002-1721
Mitre link : CVE-2002-1721
CVE.ORG link : CVE-2002-1721
JSON object : View
Products Affected
pldaniels
- altermime
CWE
CWE-193
Off-by-one Error