CVE-2005-1086

AN HTTPD Server 1.42n - RCE

Title source: llm

Description

Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Tan Chew Keong · textdoswindows

https://www.exploit-db.com/exploits/25364

View Code ZIP pw:eip

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/15361

Vendor Advisory x_refsource_misc

http://www.security.org.sg/vuln/anhttpd142n.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14861

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1013666

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/13066

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/20029

Scores

EPSS 0.0716

EPSS Percentile 91.6%

Details

Status published

Products (1)

an/an-httpd 1.42n

Published May 02, 2005

Tracked Since Feb 18, 2026