Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).Referenceshttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0096.html