var-200509-0223
Vulnerability from variot

Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. WRT54G v1.0 is prone to a remote security vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerability

iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=305&type=vulnerabilities September 13, 2005

I. BACKGROUND

The Linksys WRT54G is a combination wireless access point, switch and router. More information is available at the following URL:

http://www.linksys.com/products/product.asp?prid=508

II.

The vulnerability specifically exists in the 'apply.cgi' handler of the httpd running on the internal interfaces, including the by default the wireless interface. This handler is used by the many of the configuration pages to perform the configuration management of the router.

III. This could allow any operation to be performed on the router, including changing passwords and firewall configuration, installation of new firmware with other features, or denial of service. Exploitation of this vulnerability requires that an attacker can connect to the web management port of the router. The httpd is running by default but is only accessible via the LAN ports or the WLAN (wireless LAN). An attacker who can associate via the wireless interface to the network running a vulnerable httpd could send an exploit from a wireless device, and so not require direct physical access to an affected network. Additionally, if the httpd is configured to listen on the WAN (internet) interface, this vulnerability would be exploitable remotely over the internet.

On some versions of the WRT54G firmware the buffer used to store the POST input, 'post_buf', is before a structure in memory containing pointers to the 'mime_handlers' structure, which contains function pointers for handling the various types of input. By overwriting this structure so some function pointers point into post_buf, it is possible to execute arbitrary commands. Overwriting these values with nulls will prevent access to the httpd on the system until the router is restarted. Overwriting these values with 'garbage' values will cause the httpd to crash but it will be restarted by a system monitoring process within 2 minutes, allowing multiple exploitation attempts.

Although authentication checks are performed on access to this page, the

code which reads in the buffer is executed even if authentication fails,

so as to clear the input buffer from the client before returning an error message. This may allow an unauthenticated user to exploit the vulnerability.

IV. DETECTION

iDEFENSE has confirmed the existence of this vulnerability in version 3.01.03 of the firmware of the Linksys WRT54G, and has identified the same code is present in version 3.03.6. All versions prior to 4.20.7 may

be affected.

As this firmware is Open Source, and based on a reference implementation

supplied by the original hardware maker, there may be other affected 3rd

party firmware which use the same or similar code, and are thus also affected.

V. WORKAROUND

In order to mitigate exposure of the internal network to outside attackers, ensure encryption is enabled on the wireless interface. The exact settings to use are dependent on your wireless deployment policies.

VI. VENDOR RESPONSE

This vulnerability is addressed in firmware version 4.20.7 available for download at:

http://www.linksys.com/servlet/Satellite?childpagename=US%2FLayout

&packedargs=c%3DL_Download_C2%26cid%3D1115417109974%26sku%3D112491680264 5 &pagename=Linksys%2FCommon%2FVisitorWrapper

VII. CVE INFORMATION

The Common Vulnerabilities and Exposures (CVE) project has assigned the name CAN-2005-2799 to this issue. This is a candidate for inclusion in the CVE list (http://cve.mitre.org), which standardizes names for security problems.

VIII. DISCLOSURE TIMELINE

06/07/2005 Initial vendor notification 06/07/2005 Initial vendor response 09/13/2005 Coordinated public disclosure

IX. CREDIT

This vulnerability was discovered by Greg MacManus of iDEFENSE Labs.

Get paid for vulnerability research http://www.idefense.com/poi/teams/vcp.jsp

Free tools, research and upcoming events http://labs.idefense.com

X. LEGAL NOTICES

Copyright (c) 2005 iDEFENSE, Inc.

Permission is granted for the redistribution of this alert electronically. It may not be edited in any way without the express written consent of iDEFENSE. If you wish to reprint the whole or any part of this alert in any other medium other than electronically, please email customerservice@idefense.com for permission.

Disclaimer: The information in the advisory is believed to be accurate at the time of publishing based on currently available information. Use of the information constitutes acceptance for use in an AS IS condition. There are no warranties with regard to this information. Neither the author nor the publisher accepts any liability for any direct, indirect, or consequential loss or damage arising from use of, or reliance on, this information

Show details on source website

To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200509-0223",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "wrt54g",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "linksys",
        "version": "3.01.3"
      },
      {
        "model": "wrt54g",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "linksys",
        "version": "3.03.6"
      },
      {
        "model": "wrt54g",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "linksys",
        "version": "v3.03.3.6"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "88779"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Greg MacManus",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-2799",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2005-2799",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.0,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-14008",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2005-2799",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200509-138",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-14008",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. WRT54G v1.0 is prone to a remote security vulnerability. \nSuccessfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow\nVulnerability\n\niDEFENSE Security Advisory 09.13.05\nwww.idefense.com/application/poi/display?id=305\u0026type=vulnerabilities\nSeptember 13, 2005\n\nI. BACKGROUND\n\nThe Linksys WRT54G is a combination wireless access point, switch and\nrouter. More information is available at the following URL:\n\n http://www.linksys.com/products/product.asp?prid=508\n\nII. \n\nThe vulnerability specifically exists in the \u0027apply.cgi\u0027 handler of the \nhttpd running on the internal interfaces, including the by default the \nwireless interface. This handler is used by the many of the\nconfiguration pages to perform the configuration management of the\nrouter. \n\nIII. This could allow any operation to be\nperformed on the router, including changing passwords and firewall\nconfiguration, installation of new firmware with other features, or\ndenial of service. Exploitation of this vulnerability requires that an\nattacker can connect to the web management port of the router. The\nhttpd is running by default but is only accessible via the LAN ports or\nthe WLAN (wireless LAN). An attacker who can associate via the wireless\ninterface to the network running a vulnerable httpd could send an\nexploit from a wireless device, and so not require direct physical\naccess to an affected network. Additionally, if the httpd is configured\nto listen on the WAN (internet) interface, this vulnerability would be\nexploitable remotely over the internet. \n\nOn some versions of the WRT54G firmware the buffer used to store the\nPOST input, \u0027post_buf\u0027, is before a structure in memory containing\npointers to the \u0027mime_handlers\u0027 structure, which contains function\npointers for handling the various types of input. By overwriting this\nstructure so some function pointers point into post_buf, it is possible\nto execute arbitrary commands. Overwriting these values with nulls will\nprevent access to the httpd on the system until the router is\nrestarted. Overwriting these values with \u0027garbage\u0027 values will cause\nthe httpd to crash but it will be restarted by a system monitoring\nprocess within 2 minutes, allowing multiple exploitation attempts. \n\nAlthough authentication checks are performed on access to this page, the\n\ncode which reads in the buffer is executed even if authentication fails,\n\nso as to clear the input buffer from the client before returning an\nerror message. This may allow an unauthenticated user to exploit the \nvulnerability. \n\nIV. DETECTION\n\niDEFENSE has confirmed the existence of this vulnerability in version \n3.01.03 of the firmware of the Linksys WRT54G, and has identified the \nsame code is present in version 3.03.6. All versions prior to 4.20.7 may\n\nbe affected. \n\nAs this firmware is Open Source, and based on a reference implementation\n\nsupplied by the original hardware maker, there may be other affected 3rd\n\nparty firmware which use the same or similar code, and are thus also \naffected. \n\nV. WORKAROUND\n\nIn order to mitigate exposure of the internal network to outside \nattackers, ensure encryption is enabled on the wireless interface. The \nexact settings to use are dependent on your wireless deployment\npolicies. \n\nVI. VENDOR RESPONSE\n\nThis vulnerability is addressed in firmware version 4.20.7 available for\ndownload at:\n\nhttp://www.linksys.com/servlet/Satellite?childpagename=US%2FLayout\n \n\u0026packedargs=c%3DL_Download_C2%26cid%3D1115417109974%26sku%3D112491680264\n5\n \u0026pagename=Linksys%2FCommon%2FVisitorWrapper\n\nVII. CVE INFORMATION\n\nThe Common Vulnerabilities and Exposures (CVE) project has assigned the\nname CAN-2005-2799 to this issue. This is a candidate for inclusion in\nthe CVE list (http://cve.mitre.org), which standardizes names for\nsecurity problems. \n\nVIII. DISCLOSURE TIMELINE\n\n06/07/2005 Initial vendor notification\n06/07/2005 Initial vendor response\n09/13/2005 Coordinated public disclosure\n\nIX. CREDIT\n\nThis vulnerability was discovered by Greg MacManus of iDEFENSE Labs. \n\nGet paid for vulnerability research\nhttp://www.idefense.com/poi/teams/vcp.jsp\n\nFree tools, research and upcoming events\nhttp://labs.idefense.com\n\nX. LEGAL NOTICES\n\nCopyright (c) 2005 iDEFENSE, Inc. \n\nPermission is granted for the redistribution of this alert\nelectronically. It may not be edited in any way without the express\nwritten consent of iDEFENSE. If you wish to reprint the whole or any\npart of this alert in any other medium other than electronically, please\nemail customerservice@idefense.com for permission. \n\nDisclaimer: The information in the advisory is believed to be accurate\nat the time of publishing based on currently available information. Use\nof the information constitutes acceptance for use in an AS IS condition. \nThere are no warranties with regard to this information. Neither the\nauthor nor the publisher accepts any liability for any direct, indirect,\nor consequential loss or damage arising from use of, or reliance on,\nthis information",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      },
      {
        "db": "BID",
        "id": "88779"
      },
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "db": "PACKETSTORM",
        "id": "40042"
      }
    ],
    "trust": 1.35
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-14008",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2005-2799",
        "trust": 2.1
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138",
        "trust": 0.7
      },
      {
        "db": "IDEFENSE",
        "id": "20050913 LINKSYS WRT54G ROUTER REMOTE ADMINISTRATION APPLY.CGI BUFFER OVERFLOW VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "88779",
        "trust": 0.3
      },
      {
        "db": "PACKETSTORM",
        "id": "40042",
        "trust": 0.2
      },
      {
        "db": "EXPLOIT-DB",
        "id": "10028",
        "trust": 0.1
      },
      {
        "db": "EXPLOIT-DB",
        "id": "16854",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "82237",
        "trust": 0.1
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-71354",
        "trust": 0.1
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-67031",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-14008",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "db": "BID",
        "id": "88779"
      },
      {
        "db": "PACKETSTORM",
        "id": "40042"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "id": "VAR-200509-0223",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      }
    ],
    "trust": 0.6353147
  },
  "last_update_date": "2024-11-23T22:15:25.392000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "http://www.idefense.com/application/poi/display?id=305\u0026type=vulnerabilities"
      },
      {
        "trust": 0.1,
        "url": "http://www.idefense.com/application/poi/display?id=305\u0026amp;type=vulnerabilities"
      },
      {
        "trust": 0.1,
        "url": "http://www.linksys.com/products/product.asp?prid=508"
      },
      {
        "trust": 0.1,
        "url": "http://www.idefense.com/poi/teams/vcp.jsp"
      },
      {
        "trust": 0.1,
        "url": "http://www.linksys.com/servlet/satellite?childpagename=us%2flayout"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2799"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org),"
      },
      {
        "trust": 0.1,
        "url": "http://labs.idefense.com"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "db": "BID",
        "id": "88779"
      },
      {
        "db": "PACKETSTORM",
        "id": "40042"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "db": "BID",
        "id": "88779"
      },
      {
        "db": "PACKETSTORM",
        "id": "40042"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-09-15T00:00:00",
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "date": "2005-09-15T00:00:00",
        "db": "BID",
        "id": "88779"
      },
      {
        "date": "2005-09-14T06:59:46",
        "db": "PACKETSTORM",
        "id": "40042"
      },
      {
        "date": "2005-09-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "date": "2005-09-15T20:03:00",
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2008-09-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-14008"
      },
      {
        "date": "2016-07-06T14:33:00",
        "db": "BID",
        "id": "88779"
      },
      {
        "date": "2005-10-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      },
      {
        "date": "2024-11-21T00:00:27.617000",
        "db": "NVD",
        "id": "CVE-2005-2799"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "40042"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Linksys WRT54G apply.cgi Buffer overflow vulnerability",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer overflow",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200509-138"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.