Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4873
cve-2009-4873
buffer overflow
http server
rhino software
serv-u
web client
denial of service
remote code execution
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
High
0.387 Low
EPSS
Percentile
97.3%
Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
Affected configurations
Node
rhinosoftserv-uMatch9.0.0.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| rhinosoft:serv-u | rhinosoft serv-u | eq | 9.0.0.5 |
Related
cvelist
cvelist
CVE-2009-4873
2022-10-03 16:24:01
openvas
openvas
Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability
2009-11-03 00:00:00
Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability
2009-11-03 00:00:00
nvd
nvd
CVE-2009-4873
2010-05-26 18:30:01
prion
prion
Stack overflow
2010-05-26 18:30:00
nessus
nessus
Serv-U < 9.1.0.0
2009-11-30 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
High
0.387 Low
EPSS
Percentile
97.3%
Related for CVE-2009-4873