PT-2006-4020
CVE-2006-3124
·
Published
2006-08-26
·
Updated
2017-07-20
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Streamripper versions prior to 1.61.26
Description
The issue is related to a buffer overflow in the HTTP header parsing, which can be triggered by remote attackers sending crafted HTTP headers. This could lead to a denial of service and potentially allow the execution of arbitrary code.
Recommendations
For versions prior to 1.61.26, update to version 1.61.26 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP header parsing functionality until a patch is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾