Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2001-0173

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Published

2001-05-03T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nobreak_technologies crazywwwboard 3.0.1 Yes
Application nobreak_technologies crazywwwboard 98 Yes
Application nobreak_technologies crazywwwboard 98pe Yes
Application nobreak_technologies crazywwwboard 2000.0lepx Yes
Application nobreak_technologies crazywwwboard 2000.0px Yes
Application nobreak_technologies crazywwwboard 2000lepx Yes
Application nobreak_technologies crazywwwboard 2000px Yes
Application qdecoder qdecoder 4.0 Yes
Application qdecoder qdecoder 4.0.1 Yes
Application qdecoder qdecoder 4.3 Yes
Application qdecoder qdecoder 4.3.1 Yes
Application qdecoder qdecoder 5.0 Yes
Application qdecoder qdecoder 5.0.1 Yes
Application qdecoder qdecoder 5.0.2 Yes
Application qdecoder qdecoder 5.0.3 Yes
References