CVE-2011-2900 (mongoose, shttpd, yasslews)

Thursday, August 04, 2011
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.

More details here:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2900
1842
CVE
Post Rating I Like this!