Threats tagged 'ghsa-cfm6-7rfg-w924'

A stack-based buffer overflow vulnerability exists in BusyBox's httpd web server when processing subdirectory configuration files with an overly long index page name. An attacker with write permissions to these configuration files could exploit this flaw to execute arbitrary code with elevated privileges or cause a denial of service by crashing the server. The vulnerability requires the BusyBox httpd service to be running and serving content from directories writable by untrusted users. Exposure is limited in standard Red Hat environments where BusyBox httpd is not deployed by default.