PT-2004-2929 · Orenosv · Orenosv

Badpack3T · Published 2004-05-26 · Updated 2017-07-11 · CVE-2004-2033

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Orenosv version 0.5.9f

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a long HTTP GET request.

Recommendations For Orenosv version 0.5.9f, consider restricting the length of HTTP GET requests to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2033

Affected Products

Orenosv

References · 11

• 🔥 https://exploit-db.com/exploits/24146 · Exploit
• 🔥 http://osvdb.org/6419 · Exploit
• 🔥 http://secunia.com/advisories/11706 · Exploit
• 🔥 http://securityfocus.com/bid/10420 · Exploit
• 🔥 http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html · Exploit
• 🔥 https://exploit-db.com/exploits/24147 · Exploit
• 🔥 https://exploit-db.com/exploits/24145 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2033 · Security Note
• http://marc.info/?l=bugtraq&m=108559623703422&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2033 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16250 · Note