Lucene search

[email protected]CVE-2007-6629

HistoryJan 04, 2008 - 12:46 a.m.

CVE-2007-6629

2008-01-0400:46:00

[email protected]

web.nvd.nist.gov

cve-2007-6629

lscube feng

denial of service

remote attackers

user-agent

header line

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line.

Affected configurations

NVD

Node

fengfengRange≤0.1.15

CPENameOperatorVersion
feng:fengfengle0.1.15

CPE	Name	Operator	Version
feng:feng	feng	le	0.1.15

References

aluigi.altervista.org/adv/fengulo-adv.txt

aluigi.org/poc/fengulo.zip

osvdb.org/40537

secunia.com/advisories/28229

securityreason.com/securityalert/3507

www.securityfocus.com/archive/1/485574/100/0/threaded

www.securityfocus.com/bid/27049

www.vupen.com/english/advisories/2008/0011

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Related for CVE-2007-6629

cvelist1 nvd1 prion1