CVE-2004-1120

Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow…

published December 1, 2004

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

⚠️ A long Location header can turn your ProZilla into a playground for remote attackers! This vulnerability could let them execute arbitrary code - no fun at all! Think of it like a restaurant accepting a delivery order with a ridiculously long address that no one bothered to verify. That unverified order could lead to a meal that spills all over the restaurant, causing chaos instead of a delicious dinner! If exploited, an attacker could potentially run any code they desire on your system, leading to unauthorized access or even complete control over your device. It’s like letting someone into your home who then takes over the entire house!

Put simply

Think of it like a restaurant accepting a delivery order with a ridiculously long address that no one bothered to verify. That unverified order could lead to a meal that spills all over the restaurant, causing chaos instead of a delicious dinner! Multiple buffer overflows in ProZilla's handling of network protocols allow for remote code execution through an excessively long Location header, compromising system security.

What to do

If exploited, an attacker could potentially run any code they desire on your system, leading to unauthorized access or even complete control over your device. It’s like letting someone into your home who then takes over the entire house! To protect against this, update ProZilla to the latest version available, and consider implementing input validation checks to reject overly long headers. Remember to review your network protocol configurations too! You've got this! With these steps, you can fortify your defenses and keep your system safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14638 · 96.7th percentile
Published
2004-12-01T05:00Z
EPSS history
Timeline
  • 01 DEC 05:00Z
    Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow…
    cvelistv5