CVE:CVE-2004-0456
CNNVD:CNNVD-200412-012
Pavuk是一款文件下载程序。
Pavuk不正确处理过长的HTTP应答，远程攻击者可以利用这个漏洞以pavuk进程权限在系统上执行任意指令。
通过恶意服务器发送超长的HTTP 305应答给pavuk程序，可导致发生基于堆栈的缓冲区溢出，精心构建应答数据可能以pavuk进程权限在系统上执行任意指令。
solution:Upgrade pavuk pavuk to a higher version than 0.9pl28i,0.928r1,and avoid the version 0.9pl28i,0.928r1; Upgrade debian debian_linux to a higher version than 3.0,and avoid the version 3.0; Upgrade gentoo linux to a higher version than 1.1a,1.2,1.4,1.4:rc1,1.4:rc2,1.4:rc3,and avoid the version 1.1a,1.2,1.4,1.4:rc1,1.4:rc2,1.4:rc3