PT-2017-17022
CVE-2017-6367
·
Publicado
2017-03-14
·
Atualizado
2017-03-17
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cerberus FTP Server version 8.0.10.1
Description
The issue involves a crafted HTTP request that can cause the Windows service to crash. This is achieved by including a long Host header and an invalid Content-Length header in the request.
Recommendations
For Cerberus FTP Server version 8.0.10.1, consider restricting access to the HTTP service until a patch is available to prevent potential crashes caused by maliciously crafted requests.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾