CVE-2009-3711 - Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request

Back Back to CVE browser

HIGH

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request

Published Oct 16, 2009

10.0

HIGH

CVSS 2.0

EPSS 63.91%

Description

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (9)

http://marc.info/?l=bugtraq&m=125544914512291&w=2
mailing-listx_refsource_BUGTRAQExploit
http://osvdb.org/58714
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/36991
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.pank4j.com/exploits/httpdxb0f.php
x_refsource_MISCExploitURL Repurposed
http://www.securityfocus.com/archive/1/507042/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/507073/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2009/2874
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3684
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53700
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=125544914512291&w=2		mailing-listx_refsource_BUGTRAQExploit
http://osvdb.org/58714		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/36991		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.pank4j.com/exploits/httpdxb0f.php		x_refsource_MISCExploitURL Repurposed
http://www.securityfocus.com/archive/1/507042/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/507073/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2009/2874		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3684		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53700		vdb-entryx_refsource_XF