misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...

EUVD-2014-9048

Malware in sbrugna...

CVE-2014-9223

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

CVE-2014-9223

CVE-2014-9223 is a vulnerability in the RomPager embedded web server used by Huawei Home Gateway devices and other vendors. The issue is a digest authentication buffer overflow in RomPager’s cookie/auth processing, enabling a remote attacker to cause a denial of service and potentially execute ar...

CVE-2014-9222: Undefined Security Weakness

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9223: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...