CVE-2006-1148 - Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp

Back Back to CVE browser

HIGH

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp

Published Mar 10, 2006

7.5

HIGH

CVSS 2.0

EPSS 73.03%

Description

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

http://secunia.com/advisories/19169
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19291
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-200603-17.xml
vendor-advisoryx_refsource_GENTOO
http://www.infigo.hr/in_focus/INFIGO-2006-03-01
x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/23777
vdb-entryx_refsource_OSVDB
http://www.peercast.org/forum/viewtopic.php?t=3346
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/427160/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17040
vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2006/0900
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25113
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19169		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19291		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-200603-17.xml		vendor-advisoryx_refsource_GENTOO
http://www.infigo.hr/in_focus/INFIGO-2006-03-01		x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/23777		vdb-entryx_refsource_OSVDB
http://www.peercast.org/forum/viewtopic.php?t=3346		x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/427160/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17040		vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2006/0900		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25113		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 10, 2006

Updated Aug 7, 2024

Reserved Mar 10, 2006

Link CVE-2006-1148

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1148

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1148