CVE-2004-1120

Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.64% chance of exploitation in the next 30 days, 96th percentile

Published

2004-12-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/382219

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/652

References

• CVE Record
• NVD entry

Related

• CVE-2004-1119
• CVE-2004-1121
• CVE-2004-1118
• CVE-2004-1127
• CVE-2004-1109
• CVE-2004-1134