Apache htdigest realm Variable Overflow

medium Log Correlation Engine Plugin ID 800593

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host appears to be running a version of Apache, an open source web server. This version of Apache is vulnerable to a flaw in the 'htdigest' utilility. Specifically, a long user-supplied realm will cause an overflow and execution of arbitrary code. This issue is not considered a local flaw, as the program is not run setuid. An attacker exploiting this flaw would need to find a vulnerable Apache Web server that was making a call to 'htdigest' via a CGI script.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Medium

ID: 800593

Family: Web Servers

Reference Information

CVE: CVE-2005-1344

BID: 13537

Detections

Analytics