PT-2006-4020
CVE-2006-3124
·
Publicado
2006-08-26
·
Atualizado
2017-07-20
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Streamripper versions prior to 1.61.26
Description
The issue is related to a buffer overflow in the HTTP header parsing, which can be triggered by remote attackers sending crafted HTTP headers. This could lead to a denial of service and potentially allow the execution of arbitrary code.
Recommendations
For versions prior to 1.61.26, update to version 1.61.26 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP header parsing functionality until a patch is applied.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾