PT-2024-15423 · Acme · Acme Ultra Mini Httpd

Fernando.Mengali + 1 · Published 2024-01-06 · Updated 2024-05-17 · CVE-2024-0263

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ACME Ultra Mini HTTPd version 1.21

Description A vulnerability was found in the HTTP GET Request Handler component, which can lead to denial of service. The manipulation can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations To fix this issue, apply a patch to ACME Ultra Mini HTTPd version 1.21. As a temporary workaround, consider restricting access to the HTTP GET Request Handler until a patch is available.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-0263

Affected Products

Acme Ultra Mini Httpd

References · 11

• 🔥 https://youtube.com/watch?v=HWOGeg3e5As · Exploit
• 🔥 https://0day.today/exploit/description/39212 · Exploit
• 🔥 https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html · Exploit
• https://osv.dev/vulnerability/CVE-2024-0263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0263 · Security Note
• https://t.me/cvenotify/66498 · Telegram Post
• https://vuldb.com/?ctiid.249819 · Note
• https://vuldb.com/?id.249819 · Note
• https://twitter.com/CVEnew/status/1743839487082516900 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1743880987233190270 · Twitter Post
• https://t.me/cvenotify/66963 · Telegram Post