Vulnerability Description
Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pi3 | Pi3Web | 2.0.2_beta_1 |
References
- http://marc.info/?l=bugtraq&m=105465813729100&w=2
- http://marc.info/?l=bugtraq&m=105484265218325&w=2
- http://securitytracker.com/id?1006913
- http://www.securityfocus.com/bid/7787ExploitPatchVendor Advisory
- http://marc.info/?l=bugtraq&m=105465813729100&w=2
- http://marc.info/?l=bugtraq&m=105484265218325&w=2
- http://securitytracker.com/id?1006913
- http://www.securityfocus.com/bid/7787ExploitPatchVendor Advisory
FAQ
What is CVE-2003-1032?
CVE-2003-1032 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (cr...
How severe is CVE-2003-1032?
CVE-2003-1032 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1032?
Check the references section above for vendor advisories and patch information. Affected products include: Pi3 Pi3Web.