CVE-2013-5019
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 64%
from disclosure to weapon0 days
Published on NVDJul 31
1st PoCJul 11
metasploitJul 10
exploitation probability
64%top 1% of all CVEs
observed exploitation
nono source reports it
9 public exploit(s)
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
Affected products
n/a · n/apublic PoCs found — 9
cve_referencewww.exploit-db.com/exploits/44472/unverifiedcve_referencewww.exploit-db.com/exploits/26739unverifiedcve_referencewww.exploit-db.com/exploits/31736unverifiedcve_referencewww.exploit-db.com/exploits/31814unverifiedexploitdbwww.exploit-db.com/exploits/27608unverifiedexploitdbwww.exploit-db.com/exploits/31736unverifiedexploitdbwww.exploit-db.com/exploits/31814unverifiedexploitdbwww.exploit-db.com/exploits/26739unverifiedexploitdbwww.exploit-db.com/exploits/44472unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://osvdb.org/show/osvdb/95164https://exchange.xforce.ibmcloud.com/vulnerabilities/85599https://www.exploit-db.com/exploits/44472/http://www.exploit-db.com/exploits/26739http://www.exploit-db.com/exploits/31736http://www.exploit-db.com/exploits/31814http://www.securityfocus.com/bid/61130