Jump to content
KhiZaRix

Appweb Web Server Denial Of Service

By KhiZaRix, in Exploituri

Recommended Posts

KhiZaRix Newbie

KhiZaRix

Posted
Posted

Affected software: Appweb Web Server

CVE ID: CVE-2014-9708

Description: An HTTP request with a Range header of the form "Range:

x=," (ie. with an empty range value) will cause a null pointer

dereference, leading to a remotely-triggerable DoS.

Fixed versions: 4.6.6, 5.2.1

Bug entry: https://github.com/embedthis/appweb/issues/413

Fix: https://github.com/embedthis/appweb/commit/7e6a925f5e86a19a7934a94bbd6959101d0b84eb#diff-7ca4d62c70220e0e226e7beac90c95d9L17348

Reported by: Matthew Daley

- Matthew Daley

Source: http://dl.packetstormsecurity.net/1503-exploits/appweb-dos.txt

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...