CVE-2004-1303 in Yanf

Summary

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/20/2004
• Disclosure: 01/10/2005
• Moderation: VulDB entry created
• Entries: VDB-23823 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.03802
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1303
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1303
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1303/