Yanf get.c 缓冲区溢出漏洞

漏洞ID	1108355	漏洞类型	缓冲区溢出
发布时间	2004-12-15	更新时间	2005-01-10
CVE编号	CVE-2004-1303	CNNVD-ID	CNNVD-200501-089
漏洞平台	Multiple	CVSS评分	10.0

|漏洞来源

https://www.exploit-db.com/exploits/24980
https://www.securityfocus.com/bid/82595
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200501-089

|漏洞详情

Yanf是一个用C开发的新闻获取程序。Yanf0.4的get.c中get函数存在缓冲区溢出漏洞。远程的恶意HTTP响应将导致可执行任意代码。

|漏洞EXP

source: http://www.securityfocus.com/bid/11975/info

Yanf is prone to a buffer overflow vulnerability. This issue is exposed when the client reads data from a remote HTTP server.

If this issue is successfully exploited, it could allow for execution of arbitrary code in the context of the user running the client. 

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/24980.zip

|受影响的产品

Yanf Yanf 0.4

|参考资料

来源:XF
名称:yanf-get-bo(18615)
链接:http://xforce.iss.net/xforce/xfdb/18615
来源:MISC
链接:http://tigger.uic.edu/~jlongs2/holes/yanf.txt

相关推荐: Microsoft Office XP Spreadsheet Host().SaveAs() File Creation Vulnerability

Microsoft Office XP Spreadsheet Host().SaveAs() File Creation Vulnerability 漏洞ID 1102347 漏洞类型 Design Error 发布时间 2002-03-31 更新时间 20…