CVE-2004-1053

Published: Mar 1, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.

Affected (1)

Products: Freebsd: Fetch

Freebsd

1 product

Fetch

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Fetch	All versions

References (6)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc (unsafe URL)

Source: cve@mitre.org

http://www.securityfocus.com/bid/11702

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18160

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11702

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18160

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.