PT-2019-6610 · Weborf · Weborf

Salvo Tomaselli · Publicado 2019-11-20 · Atualizado 2019-11-22 · CVE-2011-0529

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Weborf versions prior to 0.12.5

Description The issue is related to a Denial of Service (DOS) caused by malformed fields in HTTP requests. This can lead to service disruption.

Recommendations For versions prior to 0.12.5, update to version 0.12.5 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTP endpoints that may be vulnerable to malformed fields until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-0529

Produtos afetados

Weborf

Referências · 6

• 🔥 https://openwall.com/lists/oss-security/2011/01/31/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0529 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2011-0529 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0529 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-0529 · Aviso do Fabricante
• https://t.me/cibsecurity/8226 · Publicação no Telegram