CVE-2005-1391: apsis pound
Vulnerability summary
CVE-2005-1391 is a high (CVSS 7.5) vulnerability in apsis pound. EPSS estimates a 6.07% chance of exploitation in the next 30 days, higher than 93.4% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 02-05-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.07%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
No change 0.00 pp
From 6.07% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (apsis.ch)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Apsis1 product
- pound1.8.2
Debian1 product
- pound< 1.8.2-1.1
2 vendors · 2 products
References
14 links
- www.apsis.ch/pound/pound_list/archive/2005/2005-04/1114516112000Mailing ListX Refsource MLISTExploit
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=307852X Refsource MISC