CVE-2007-0838
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.9%
FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service (infinite loop) via a HOST: header with a hostname and port number that refers to the server itself.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| freeproxy:freeproxy | freeproxy | eq | 3.92 |
References
marc.info/?l=bugtraq&m=117086856902907&w=2
marc.info/?l=full-disclosure&m=117085666921871&w=2
osvdb.org/33116
secunia.com/advisories/24064
www.handcraftedsoftware.org/index.php?page=3&mode=article&k=60
www.securityfocus.com/bid/22445
www.vupen.com/english/advisories/2007/0514
exchange.xforce.ibmcloud.com/vulnerabilities/32303
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.9%