Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| qdecoder | qdecoder | 4.0 |
| nobreak_technologies | crazywwwboard | 2000lepx |
| nobreak_technologies | crazywwwboard | 98 |
| qdecoder | qdecoder | 4.3.1 |
| qdecoder | qdecoder | 5.0 |
| nobreak_technologies | crazywwwboard | 98pe |
| nobreak_technologies | crazywwwboard | 2000.0px |
| nobreak_technologies | crazywwwboard | 2000px |
| qdecoder | qdecoder | 5.0.3 |
| qdecoder | qdecoder | 4.3 |
| nobreak_technologies | crazywwwboard | 3.0.1 |
| qdecoder | qdecoder | 5.0.1 |
| qdecoder | qdecoder | 4.0.1 |
| nobreak_technologies | crazywwwboard | 2000.0lepx |
| qdecoder | qdecoder | 5.0.2 |
Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| nobreak_technologies | crazywwwboard | 2000p4 |
| nobreak_technologies | crazywwwboard | 2000lep5 |