CVE-2005-1086 describes a buffer overflow vulnerability in the cmdIS.DLL plugin of AN HTTPD Server version 1.42n, allowing remote attackers to execute arbitrary code. This critical flaw can be triggered by sending a specially crafted HTTP request containing an excessively long User-Agent header. While the CVSS score is 6.4, indicating moderate severity, its FAUCET Risk Score of 89/100 highlights a significant potential impact, including partial integrity and availability compromise. Although no active exploitation or Metasploit modules are reported, a Proof-of-Concept exploit is available on ExploitDB, and there is minimal community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.42nCPE matchmatch criteria | cpe:2.3:a:an:an-httpd:1.42n:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.