PT-2006-7452 · Aidex · Aidex Mini-Webserver

Shinnai · Published 2006-12-31 · Updated 2017-10-19 · CVE-2006-6855

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: AIDeX Mini-WebServer version 1.1 early release 3

Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a flood of HTTP GET requests. This might be related to the display of HTTP log data by the GUI.

Recommendations: For AIDeX Mini-WebServer version 1.1 early release 3, consider implementing rate limiting on HTTP GET requests to mitigate the risk of denial of service attacks. Additionally, restricting access to the GUI's HTTP log data display may help minimize the impact of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6855

Affected Products

Aidex Mini-Webserver

References · 8

• 🔥 http://addict3d.org/index.php?page=viewarticle&type=security&ID=8473 · Exploit
• 🔥 https://exploit-db.com/exploits/3034 · Exploit
• http://secunia.com/advisories/23569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6855 · Security Note
• http://securitytracker.com/id?1017455 · Note
• http://securityfocus.com/bid/21816 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6855 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31153 · Note