Security Advisory

CVE-2002-1441

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-03-18 05:00:00

Last updated 2024-08-08 03:26:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.

← Browse all CVEs View on cve.org ↗