CVE-2005-1391

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers...

7.5 HighFix available

CVE-2005-1391 is a high vulnerability (CVSS 7.5) in Apsis Pound, published May 2, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.07%, the 93rd percentile. Fixed in pound 1.8.2-1.1.

What does this mean?

Severity: 7.5 HighCVSS 2.0, NVD
Exploit chance: 6.07%EPSS, 93rd percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 1.8.2-1.1pound +2 more

Description

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Exploit likelihood

6.07%Down 5.2 points since Feb 4, 2022

Affected products

apsis pound

Affected packages

Affected packages
Package	Affected	Fixed
`pound` Debian:13	before 1.8.2-1.1	1.8.2-1.1
`pound` Debian:14	before 1.8.2-1.1	1.8.2-1.1
`pound` Debian:3.1 From an advisory covering 2 CVEs	before 1.8.2-1sarge1, plus listed versions 1.8.2-1	1.8.2-1sarge1

What each source reports

NVD Score used7.5

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: CVE-2005-1391
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: CVE-2005-1391
Updated: 2026-11-02

EUVDEUVD-2005-1394No score

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: EUVD-2005-1394
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j929-r777-hgmmNo score

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers...

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: GHSA-j929-r777-hgmm
Updated: 2026-11-02

OSVNo score

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: CVE-2005-1391
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-1391No score

Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

Record: DEBIAN-CVE-2005-1391
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 10 moreShow less