CVE-2003-1228

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-120

Description

Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.

Affected products

Mathopd: from 1.2 before 1.5; 1.5, 1.5-beta13 — fixed in 1.5

How to fix

Upgrade to a fixed version: Mathopd 1.5. Check the vendor advisory for mitigations.

References

http://marc.info/?l=bugtraq&m=107064887507504&w=2
http://marc.info/?l=bugtraq&m=107090601705839&w=2
http://secunia.com/advisories/10385/
http://www.securiteam.com/unixfocus/5FP0C1FCAW.html
http://www.securityfocus.com/bid/9871
https://exchange.xforce.ibmcloud.com/vulnerabilities/15474
http://marc.info/?l=bugtraq&m=107064887507504&w=2
http://marc.info/?l=bugtraq&m=107090601705839&w=2
http://secunia.com/advisories/10385/
http://www.securiteam.com/unixfocus/5FP0C1FCAW.html
http://www.securityfocus.com/bid/9871
https://exchange.xforce.ibmcloud.com/vulnerabilities/15474

Get alerted when CVE-2003-1228 or the next vulnerability affects your stack