PT-2019-6610 · Weborf · Weborf

Salvo Tomaselli · Published 2019-11-20 · Updated 2019-11-22 · CVE-2011-0529

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Weborf versions prior to 0.12.5

Description The issue is related to a Denial of Service (DOS) caused by malformed fields in HTTP requests. This can lead to service disruption.

Recommendations For versions prior to 0.12.5, update to version 0.12.5 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTP endpoints that may be vulnerable to malformed fields until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0529

Affected Products

Weborf

References · 6

• 🔥 https://openwall.com/lists/oss-security/2011/01/31/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0529 · Security Note
• https://osv.dev/vulnerability/CVE-2011-0529 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0529 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0529 · Vendor Advisory
• https://t.me/cibsecurity/8226 · Telegram Post