Test Kennung:	1.3.6.1.4.1.25623.1.0.802923
Kategorie:	Web Servers
Titel:	Null HTTPd Server Content-Length HTTP Header Buffer Overflow Vulnerability
Zusammenfassung:	Null HTTPd Server is prone to heap based buffer overflow vulnerability.
Beschreibung:	Summary: Null HTTPd Server is prone to heap based buffer overflow vulnerability. Vulnerability Insight: Improper way of handling of negative 'Content-Length' values in HTTP header field, leads to a buffer overflow. By sending an HTTP request with a negative value in the 'Content-Length' header field, a remote attacker could overflow a buffer and cause the server to crash or execute arbitrary code on the system. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code on the target system or cause the web server to crash. Affected Software/OS: Null HTTPd Server version 0.5.0 and prior. Solution: Upgrade Null HTTPd Server to 0.5.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1496 BugTraq ID: 5774 http://www.securityfocus.com/bid/5774 Bugtraq: 20020922 remote exploitable heap overflow in Null HTTPd 0.5.0 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-09/0284.html http://www.iss.net/security_center/static/10160.php
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.