CVE-2012-10053

Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow on the stack. This flaw allows remote attackers to execute arbitrary code with the privileges of the web server process. The vulnerability is triggered before authentication.

CVSS

No CVSS.

References

Link	Resource
http://ghostinthelab.wordpress.com/2012/07/19/simplewebserver-2-2-rc2-remote-buffer-overflow-exploit/
http://www.pmx.it/software/sws.asp
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sws_connection_bof.rb
https://www.exploit-db.com/exploits/19937
https://www.exploit-db.com/exploits/20028
https://www.vulncheck.com/advisories/simple-web-server-connection-header-buffer-overflow
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sws_connection_bof.rb
https://www.exploit-db.com/exploits/19937
https://www.exploit-db.com/exploits/20028

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Simple Web Server 2.2 rc2 contiene una vulnerabilidad de desbordamiento de búfer en la pila al gestionar la cabecera HTTP Connection. Cuando un atacante remoto envía una cadena demasiado larga en esta cabecera, el servidor utiliza vsprintf() sin la comprobación de los límites adecuada, lo que provoca un desbordamiento de búfer en la pila. Esta falla permite a los atacantes remotos ejecutar código arbitrario con los privilegios del proceso del servidor web. La vulnerabilidad se activa antes de la autenticación.

08 Aug 2025, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-08 19:15

Updated : 2026-04-15 00:35

NVD link : CVE-2012-10053

Mitre link : CVE-2012-10053

CVE.ORG link : CVE-2012-10053

JSON object : View

Products Affected

No product.

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2012-10053", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "disclosure@vulncheck.com"}], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-08-08T19:15:35.637", "references": [{"url": "http://ghostinthelab.wordpress.com/2012/07/19/simplewebserver-2-2-rc2-remote-buffer-overflow-exploit/", "source": "disclosure@vulncheck.com"}, {"url": "http://www.pmx.it/software/sws.asp", "source": "disclosure@vulncheck.com"}, {"url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sws_connection_bof.rb", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/19937", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/20028", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/simple-web-server-connection-header-buffer-overflow", "source": "disclosure@vulncheck.com"}, {"url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sws_connection_bof.rb", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://www.exploit-db.com/exploits/19937", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://www.exploit-db.com/exploits/20028", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow on the stack. This flaw allows remote attackers to execute arbitrary code with the privileges of the web server process. The vulnerability is triggered before authentication."}, {"lang": "es", "value": "Simple Web Server 2.2 rc2 contiene una vulnerabilidad de desbordamiento de b\u00fafer en la pila al gestionar la cabecera HTTP Connection. Cuando un atacante remoto env\u00eda una cadena demasiado larga en esta cabecera, el servidor utiliza vsprintf() sin la comprobaci\u00f3n de los l\u00edmites adecuada, lo que provoca un desbordamiento de b\u00fafer en la pila. Esta falla permite a los atacantes remotos ejecutar c\u00f3digo arbitrario con los privilegios del proceso del servidor web. La vulnerabilidad se activa antes de la autenticaci\u00f3n."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "disclosure@vulncheck.com"}