PT-2009-2483 · Fhttpd · Fhttpd

Jeremy Brown · Publicado 2009-08-19 · Atualizado 2017-09-29 · CVE-2008-7014

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions fhttpd version 0.4.2

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending an Authorization HTTP header with an invalid character after the Basic value.

Recommendations For fhttpd version 0.4.2, consider restricting access to the Authorization HTTP header or validating its input to prevent the denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2008-7014

Produtos afetados

Fhttpd

Referências · 4

• 🔥 https://exploit-db.com/exploits/6493 · Exploit
• 🔥 http://securityfocus.com/bid/31265 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45278 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7014 · Nota de Segurança