The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.

Mitre reports :

The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.

The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.

From Red Hat Security Advisory 2007:0208 :

Updated w3c-libwww packages that fix a security issue and a bug are now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

w3c-libwww is a general-purpose web library.

Several buffer overflow flaws in w3c-libwww were found. If a client application that uses w3c-libwww connected to a malicious HTTP server, it could trigger an out of bounds memory access, causing the client application to crash (CVE-2005-3183).

This updated version of w3c-libwww also fixes an issue when computing MD5 sums on a 64 bit machine.

Users of w3c-libwww should upgrade to these updated packages, which contain backported patches to correct these issues.

Updated w3c-libwww packages that fix a security issue and a bug are now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

w3c-libwww is a general-purpose web library.

Several buffer overflow flaws in w3c-libwww were found. If a client application that uses w3c-libwww connected to a malicious HTTP server, it could trigger an out of bounds memory access, causing the client application to crash (CVE-2005-3183).

This updated version of w3c-libwww also fixes an issue when computing MD5 sums on a 64 bit machine.

Users of w3c-libwww should upgrade to these updated packages, which contain backported patches to correct these issues.

Several buffer overflow flaws in w3c-libwww were found. If a client application that uses w3c-libwww connected to a malicious HTTP server, it could trigger an out of bounds memory access, causing the client application to crash (CVE-2005-3183).

Sam Varshavchik discovered several buffer overflows in the HTBoundary_put_block() function. By sending specially crafted HTTP multipart/byteranges MIME messages, a malicious HTTP server could trigger an out of bounds memory access in the libwww library, which causes the program that uses the library to crash.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sam Varshavchik discovered the HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.

The updated packages have been patched to address this issue.

This update fixes libwww's handling of multipart/byteranges content and a possible stack overflow.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
95408	FreeBSD : libwww -- multiple vulnerabilities (18449f92-ab39-11e6-8011-005056925db4)	Nessus	FreeBSD Local Security Checks	medium
67474	Oracle Linux 4 : w3c-libwww (ELSA-2007-0208)	Nessus	Oracle Linux Local Security Checks	medium
67040	CentOS 4 : w3c-libwww (CESA-2007:0208)	Nessus	CentOS Local Security Checks	medium
60173	Scientific Linux Security Update : w3c-libwww on SL4 i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
25136	RHEL 4 : w3c-libwww (RHSA-2007:0208)	Nessus	Red Hat Local Security Checks	medium
20762	Ubuntu 4.10 / 5.04 / 5.10 : w3c-libwww vulnerability (USN-220-1)	Nessus	Ubuntu Local Security Checks	medium
20443	Mandrake Linux Security Advisory : w3c-libwww (MDKSA-2005:210)	Nessus	Mandriva Local Security Checks	medium
19972	Fedora Core 3 : w3c-libwww-5.4.0-10.0.FC3.1 (2005-953)	Nessus	Fedora Local Security Checks	medium
19971	Fedora Core 4 : w3c-libwww-5.4.0-13.0.FC4.1 (2005-952)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2005-3183

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium