CVE-2004-1286

Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary…

published December 22, 2004

CVSS
—
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

⚠️ A crafty buffer overflow lurks in NapShare 1.2, thanks to the extern filter being enabled! An attacker could send a specific gnutella response to execute arbitrary code. 🔥 Think of this like a restaurant accepting any random order without checking it — if the chef isn't careful, they could end up cooking something dangerous that ruins everyone's meal! If exploited, an attacker could run malicious code on the affected system, leading to unauthorized access or control. It's like handing over the keys to your restaurant without checking who’s asking!

Put simply

Think of this like a restaurant accepting any random order without checking it — if the chef isn't careful, they could end up cooking something dangerous that ruins everyone's meal! This vulnerability occurs in the auto_filter_extern function, where a buffer overflow can be triggered by specially crafted responses, allowing remote code execution without proper validation.

What to do

If exploited, an attacker could run malicious code on the affected system, leading to unauthorized access or control. It's like handing over the keys to your restaurant without checking who’s asking! To mitigate this risk, disable the extern filter if you aren't using it, and consider updating to a newer version if available. Regularly review your configurations to ensure no unnecessary features are enabled. 🛡️ You've got this! Follow these steps, and you'll keep your system safe and sound. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12402 · 96.2th percentile
Published
2004-12-22T05:00Z
EPSS history
Timeline
  • 22 DEC 05:00Z
    Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary…
    cvelistv5