Published: 16/10/2009 Updated: 14/02/2024

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jasper httpdx 1.4.3
jasper httpdx 1.4

httpdx web server 14 is vulnerable to a remote buffer overflow using long GET requests such as wwwexamplecom/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA The vulnerability lies in httpdx_src/httpcpp in h_handlepeer() : strcpy(index,client->filereq); Other versions may also be vulnerable Exploit (0day) (Tested with httpdx 14 on ...

## # $Id: httpdx_handlepeerrb 9934 2010-07-26 23:22:42Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## ## # httpdx_handlepeerr ...

CWE-119 http://www.pank4j.com/exploits/httpdxb0f.php http://www.vupen.com/english/advisories/2009/2874 http://marc.info/?l=bugtraq&m=125544914512291&w=2 http://osvdb.org/58714 http://secunia.com/advisories/36991 https://exchange.xforce.ibmcloud.com/vulnerabilities/53700 http://www.securityfocus.com/archive/1/507073/100/0/threaded http://www.securityfocus.com/archive/1/507042/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/10053/

CVE-2009-3711

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect