Signature Detail
Short Name |
HTTP:LHTTPD:GET-OF-RH7 |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
HTTP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+ |
HTTP: Light HTTPD Get Request Buffer Overflow (RedHat 7.x)
This signature detects attempts to exploit a known vulnerability against Light HTTPD for Linux. RedHat Linux versions 7.x are vulnerable. Because Light HTTPD does not properly parse the URL, attackers can send a malicious GET request to execute arbitrary code on the host.
Extended Description
Light httpd is prone to a remotely exploitable buffer overflow condition. This overflow can be triggered by sending the server an excessively long GET request. As Light httpd drops user privileges when running, exploitation of this issue may result in the execution of arbitrary attacker-supplied commands with the privileges of the 'nobody' user.
Affected Products
- Light httpd 0.1.0
References
- BugTraq: 6162
- CVE: CVE-2002-1549
- URL: http://www.security.nnov.ru/search/document.asp?docid=3745