CVE-2005-1344: Buffer Overflow

Published Apr 27, 2005

Updated

Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

Affected Software

1 affected component

Apache HTTP Server=2.0.52

Event History

Apr 27, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1344?

CVE-2005-1344 is classified as having low severity due to its limited attack vectors, primarily affecting local access.

How do I fix CVE-2005-1344?

To mitigate CVE-2005-1344, upgrade Apache HTTP Server to a version higher than 2.0.52.

What software is impacted by CVE-2005-1344?

CVE-2005-1344 affects Apache HTTP Server version 2.0.52.

What type of vulnerability is CVE-2005-1344?

CVE-2005-1344 is a buffer overflow vulnerability.

Can CVE-2005-1344 lead to remote code execution?

CVE-2005-1344 can allow attackers to execute arbitrary code, but typically requires local access to exploit.