Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.800175
Kategorie:Web Servers
Titel:Xerver HTTP Server Web Administration <= 4.32 DoS Vulnerability
Zusammenfassung:Xerver HTTP Server is prone to a denial of service (DoS); vulnerability.
Beschreibung:Summary:
Xerver HTTP Server is prone to a denial of service (DoS)
vulnerability.

Vulnerability Insight:
The flaw is due to improper validation of user supplied input
passed to HTTP server port via Web Administration Wizard. An attacker can set HTTP Server port to
any kind of letter combination causing server crash.

Vulnerability Impact:
Successful exploitation will allow attackers to cause a DoS or
execute arbitrary code.

Affected Software/OS:
Xerver version 4.32 and prior on all platforms.

Solution:
No known solution was made available for at least one year
since the disclosure of this vulnerability. Likely none will be provided anymore. General solution
options are to upgrade to a newer release, disable respective features, remove the product or
replace the product by another one.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-4658
http://www.exploit-db.com/exploits/9717
XForce ISS Database: xerver-admin-dos(53351)
https://exchange.xforce.ibmcloud.com/vulnerabilities/53351
Common Vulnerability Exposure (CVE) ID: CVE-2009-4657
BugTraq ID: 36454
http://www.securityfocus.com/bid/36454
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.