CVE-2011-2900

Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server…

published August 5, 2011

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13256 · 96.4th percentile
Published
2011-08-05T21:00Z
EPSS history
Timeline
  • 05 AUG 21:00Z
    Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server…
    cvelistv5