Vulnerabilities > CVE-2001-0173 - Remote Buffer Overflow vulnerability in qDecoder

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

nobreak-technologies

qdecoder

critical

exploit available

NVD

Published: 2001-05-03

Updated: 2017-12-19

Summary

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Vulnerable Configurations

Part	Description	Count
Application	Nobreak_Technologies Nobreak Technologies Crazywwwboard 3.0.1 Nobreak Technologies Crazywwwboard 98 Nobreak Technologies Crazywwwboard 98Pe Nobreak Technologies Crazywwwboard 2000.0Lepx Nobreak Technologies Crazywwwboard 2000.0Px Nobreak Technologies Crazywwwboard 2000Lepx Nobreak Technologies Crazywwwboard 2000Px	7
Application	Qdecoder Qdecoder Qdecoder 4.0 Qdecoder Qdecoder 4.0.1 Qdecoder Qdecoder 4.3 Qdecoder Qdecoder 4.3.1 Qdecoder Qdecoder 5.0 Qdecoder Qdecoder 5.0.1 Qdecoder Qdecoder 5.0.2 Qdecoder Qdecoder 5.0.3	8

Exploit-Db

description	qDecoder 4.x/5.x Remote Buffer Overflow Vulnerability. CVE-2001-0173. Remote exploit for cgi platform
id	EDB-ID:20606
last seen	2016-02-02
modified	2000-03-26
published	2000-03-26
reporter	Jin Ho You
source	https://www.exploit-db.com/download/20606/
title	qDecoder 4.x/5.x - Remote Buffer Overflow Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References