Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Crazywwwboard | Nobreak_technologies | 3.0.1 (including) | 3.0.1 (including) |
| Crazywwwboard | Nobreak_technologies | 98 (including) | 98 (including) |
| Crazywwwboard | Nobreak_technologies | 98pe (including) | 98pe (including) |
| Crazywwwboard | Nobreak_technologies | 2000.0lepx (including) | 2000.0lepx (including) |
| Crazywwwboard | Nobreak_technologies | 2000.0px (including) | 2000.0px (including) |
| Crazywwwboard | Nobreak_technologies | 2000lepx (including) | 2000lepx (including) |
| Crazywwwboard | Nobreak_technologies | 2000px (including) | 2000px (including) |
| Qdecoder | Qdecoder | 4.0 (including) | 4.0 (including) |
| Qdecoder | Qdecoder | 4.0.1 (including) | 4.0.1 (including) |
| Qdecoder | Qdecoder | 4.3 (including) | 4.3 (including) |
| Qdecoder | Qdecoder | 4.3.1 (including) | 4.3.1 (including) |
| Qdecoder | Qdecoder | 5.0 (including) | 5.0 (including) |
| Qdecoder | Qdecoder | 5.0.1 (including) | 5.0.1 (including) |
| Qdecoder | Qdecoder | 5.0.2 (including) | 5.0.2 (including) |
| Qdecoder | Qdecoder | 5.0.3 (including) | 5.0.3 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html
- http://www.securityfocus.com/bid/2329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6033
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html
- http://www.securityfocus.com/bid/2329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6033