CVE-2005-2041

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.5%

from disclosure to weapon0 days

Published on NVDJun 21

1st PoCJun 14

exploitation probability

5.5%top 8% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1047

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=full-disclosure&m=111880273631392&w=2 http://secunia.com/advisories/15700 https://exchange.xforce.ibmcloud.com/vulnerabilities/21000 http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt http://www.globalhauri.com/html/download/down_unixpatch.html http://www.osvdb.org/17320 http://www.securiteam.com/exploits/5TP0C1FG1I.html http://www.securityfocus.com/bid/12964