THE KNOWLEDGE IS THE WORK.
Resources(82)
CoreHTTP web server off-by-one buffer overflow vulnerability
Patroklos Argyroudis
A flaw in the CoreHTTP web server (versions 0.5.3.1 and earlier) allows remote attackers to trigger an off‑by‑one stack buffer overflow during parsing of malformed HTTP method names or URIs. Because the server's sscanf() call writes a full 256 bytes into 256‑byte buffers without ensuring NULL‑termination, crafted...