CVE-2005-3183

Published: Oct 12, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.

Affected (1)

Products: W3c: Libwww

W3c

1 product

Libwww

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
W3c Libwww	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt (unsafe URL)

Source: secalert@redhat.com

http://secunia.com/advisories/17119

Source: secalert@redhat.com

http://secunia.com/advisories/17122

Source: secalert@redhat.com

http://secunia.com/advisories/17489

Source: secalert@redhat.com

http://secunia.com/advisories/17814

Source: secalert@redhat.com

http://secunia.com/advisories/19193

Source: secalert@redhat.com

http://secunia.com/advisories/25098

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:210

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0208.html

Source: secalert@redhat.com

http://www.securityfocus.com/advisories/9444

Source: secalert@redhat.com

http://www.securityfocus.com/advisories/9445

Source: secalert@redhat.com

http://www.securityfocus.com/bid/15035

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597

Source: secalert@redhat.com

ExploitVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9653

Source: secalert@redhat.com

https://usn.ubuntu.com/220-1/

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt (unsafe URL)