Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.804438
Kategorie:Buffer overflow
Titel:Kolibri WebServer HTTP Request Buffer Overflow Vulnerability
Zusammenfassung:This host is running Kolibri WebServer and is prone to denial of service; vulnerability.
Beschreibung:Summary:
This host is running Kolibri WebServer and is prone to denial of service
vulnerability.

Vulnerability Insight:
The flaw is due to an error when processing web requests and can be exploited
to cause a stack-based buffer overflow via an overly long string passed in a
HEAD or GET request.

Vulnerability Impact:
Successful exploitation may allow remote attackers to cause the application
to crash, creating a denial-of-service condition.

Affected Software/OS:
Kolibri webserver version 2.0.

Solution:
No known solution was made available for at least one year
since the disclosure of this vulnerability. Likely none will be provided anymore. General solution
options are to upgrade to a newer release, disable respective features, remove the product or
replace the product by another one.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-5301
BugTraq ID: 45579
http://www.securityfocus.com/bid/45579
http://www.exploit-db.com/exploits/15834
http://osvdb.org/show/osvdb/70808
Common Vulnerability Exposure (CVE) ID: CVE-2014-4158
BugTraq ID: 68195
http://www.securityfocus.com/bid/68195
http://www.exploit-db.com/exploits/33027
http://www.exploit-db.com/exploits/34059
http://packetstormsecurity.com/files/126332/Kolibri-2.0-Stack-Buffer-Overflow.html
http://osvdb.org/show/osvdb/108090
CopyrightCopyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.