CVE-2005-1086 - Vulnerability Details - OpenCVE

Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.07164.

Key SSVC decision points have not yet been added.

Vendors	Products
An	An-httpd

Configuration 1 [-]

cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2005-1089	Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/14861
http://securitytracker.com/id?1013666
http://www.osvdb.org/15361
http://www.security.org.sg/vuln/anhttpd142n.html
http://www.securityfocus.com/bid/13066
https://exchange.xforce.ibmcloud.com/vulnerabilities/20029

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-04-13T04:00:00

Updated: 2024-08-07T21:35:59.935Z

Reserved: 2005-04-13T00:00:00

Link: CVE-2005-1086

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-05-02T04:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-1086

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-04-07T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "15361", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/15361"}, {"tags": ["x_refsource_MISC"], "url": "http://www.security.org.sg/vuln/anhttpd142n.html"}, {"name": "14861", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/14861"}, {"name": "1013666", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1013666"}, {"name": "13066", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/13066"}, {"name": "an-httpd-cmdisdll-bo(20029)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-1086", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "15361", "refsource": "OSVDB", "url": "http://www.osvdb.org/15361"}, {"name": "http://www.security.org.sg/vuln/anhttpd142n.html", "refsource": "MISC", "url": "http://www.security.org.sg/vuln/anhttpd142n.html"}, {"name": "14861", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/14861"}, {"name": "1013666", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1013666"}, {"name": "13066", "refsource": "BID", "url": "http://www.securityfocus.com/bid/13066"}, {"name": "an-httpd-cmdisdll-bo(20029)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T21:35:59.935Z"}, "title": "CVE Program Container", "references": [{"name": "15361", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/15361"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.security.org.sg/vuln/anhttpd142n.html"}, {"name": "14861", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/14861"}, {"name": "1013666", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1013666"}, {"name": "13066", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/13066"}, {"name": "an-httpd-cmdisdll-bo(20029)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-1086", "datePublished": "2005-04-13T04:00:00", "dateReserved": "2005-04-13T00:00:00", "dateUpdated": "2024-08-07T21:35:59.935Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:*", "matchCriteriaId": "E925BE54-5384-479A-BC60-DEEFF4C7093F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header."}], "id": "CVE-2005-1086", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/14861"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1013666"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/15361"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.security.org.sg/vuln/anhttpd142n.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/13066"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/14861"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1013666"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/15361"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.security.org.sg/vuln/anhttpd142n.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/13066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20029"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}