CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

• http://marc.info/?l=bugtraq&m=109834486312407&w=2
• http://secunia.com/advisories/12908
• http://securitytracker.com/id?1011832
• http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt
• http://www.debian.org/security/2004/dsa-578Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml
• http://www.osvdb.org/11023
• http://www.securityfocus.com/bid/11468Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17574
• http://marc.info/?l=bugtraq&m=109834486312407&w=2
• http://secunia.com/advisories/12908
• http://securitytracker.com/id?1011832
• http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt
• http://www.debian.org/security/2004/dsa-578Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml
• http://www.osvdb.org/11023
• http://www.securityfocus.com/bid/11468Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17574

Published

Feb 9, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0976Multiple scripts in the perl package in Trustix Secure Linux…
• CVE-2004-0977The make_oidjoins_check script in PostgreSQL 7.4.5 and earli…
• CVE-2004-0978Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) Ac…
• CVE-2004-0979Internet Explorer on Windows XP does not properly modify the…
• CVE-2004-0980Format string vulnerability in ez-ipupdate.c for ez-ipupdate…
• CVE-2004-0981Buffer overflow in the EXIF parsing routine in ImageMagick b…
• CVE-2004-0983The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.…
• CVE-2004-0984Unknown vulnerability in the dotlock implementation in mailu…
• CVE-2004-0985Internet Explorer 6.x on Windows XP SP2 allows remote attack…
• CVE-2004-0986Iptables before 1.2.11, under certain conditions, does not p…
• CVE-2004-0987Buffer overflow in the process_menu function in yardradius 1…
• CVE-2004-0988Integer overflow on Apple QuickTime before 6.5.2, when runni…