CVE-2004-1053

CVE-2004-1053 describes an integer overflow vulnerability in the 'fetch' utility within FreeBSD versions 4.1 through 5.3. This flaw allows remote malicious HTTP servers to execute arbitrary code on a vulnerable client system by crafting specific HTTP response headers, leading to a buffer overflow. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk with network-based attacks, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.