Lucene search
+L

47 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•6 views

CVE-2018-10243: Out-of-bounds Read

htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...

9.8CVSS8.4AI score0.02578EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2012/09/18 6:55 p.m.•8 views

DEBIAN-CVE-2012-1184

Stack-based buffer overflow in the astparsedigest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header...

7.5CVSS8.3AI score0.16391EPSS
SaveExploits1References1
osv-debian
osv-debian
•added 2009/11/10 6:30 p.m.•17 views

DEBIAN-CVE-2009-3727

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...

5CVSS6.6AI score0.04201EPSS
SaveExploits0References1
Prion
Prion
•added 2007/07/24 12:30 a.m.•26 views

Denial of service

modauth httpauth.c in lighttpd before 1.4.16 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a cnonce, 3 base64 encoded strings, and 4 trailing whitespace in the Auth-Digest header...

6.4CVSS6.7AI score0.03422EPSS
SaveExploits0References18Affected Software1
osv-cve
osv-cve
•added 2007/07/24 12:30 a.m.•18 views

CVE-2007-3946

modauth httpauth.c in lighttpd before 1.4.16 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a cnonce, 3 base64 encoded strings, and 4 trailing whitespace in the Auth-Digest header...

6.4AI score
SaveExploits0References18
osv-debian
osv-debian
•added 2007/07/24 12:30 a.m.•11 views

DEBIAN-CVE-2007-3946

modauth httpauth.c in lighttpd before 1.4.16 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a cnonce, 3 base64 encoded strings, and 4 trailing whitespace in the Auth-Digest header...

6.4CVSS6.8AI score0.03422EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/24 12:00 a.m.•7 views

CVE-2007-3946: Undefined Security Weakness

modauth httpauth.c in lighttpd before 1.4.16 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a cnonce, 3 base64 encoded strings, and 4 trailing whitespace in the Auth-Digest header...

6.4CVSS5.9AI score0.03422EPSS
SaveExploits0References1
Rows per page
Query Builder