CVE-2003-1247

ALTO 7.5CVE-2003-1247 · Published 31/12/2003 · updated 16/06/2026

In breve

CVE-2003-1247 è una vulnerabilità ALTO (CVSS 7.5) che riguarda h-sphere (positive software).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 10.0%, superiore al 95.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
h-sphere positive_software	`= 2.3_rc3`	No fix yet

Description

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.

References

psoft.net/misc/webshell_patch.html · Patch
secunia.com/advisories/7832
iss.net/security_center/static/10999.php · Patch
iss.net/security_center/static/11002.php · Patch
iss.net/security_center/static/11003.php · Patch
securityfocus.com/archive/1/305313 · Exploit
securityfocus.com/bid/6527
securityfocus.com/bid/6537 · Patch
securityfocus.com/bid/6538 · Patch
securityfocus.com/bid/6540 · Patch
securitytracker.com/id

Altre vulnerabilità di h-sphere

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

h-sphere

positive_software

= 2.3_rc3

No fix yet

Altre vulnerabilità di h-sphere

Vedi tutto →