FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Overflow error in fetch

Affected packages
5.3	<=	FreeBSD	<	5.3_1
5.2.1	<=	FreeBSD	<	5.2.1_12
5.1	<=	FreeBSD	<	5.1_18
5.0	<=	FreeBSD	<	5.0_22
4.10	<=	FreeBSD	<	4.10_4
4.9	<=	FreeBSD	<	4.9_13
4.8	<=	FreeBSD	<	4.8_26
		FreeBSD	<	4.7_28

Details

VuXML ID	759b8dfe-3972-11d9-a9e7-0001020eed82
Discovery	2004-11-14
Entry	2004-11-18

An integer overflow condition in fetch(1) in the processing of HTTP headers can result in a buffer overflow.

A malicious server or CGI script can respond to an HTTP or HTTPS request in such a manner as to cause arbitrary portions of the client's memory to be overwritten, allowing for arbitrary code execution.

References

Bugtraq ID	11702
CVE Name	CVE-2004-1053
FreeBSD Advisory	SA-04:16.fetch