PT-2020-22673

Name of the Vulnerable Software and Affected Versions Waitress versions prior to 1.4.0 Description The issue allows request smuggling by sending the Content-Length header twice. When a double Content-Length header is sent, it gets header folded into a comma-separated value, which cannot be cast t...

CVE-2011-2668

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

CVE-2011-2668

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

Design/Logic Flaw

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

CVE-2011-2668

Mozilla Firefox 1.5.0.3 and earlier contains a vulnerability in processing the content-length header that can allow script injection from another domain when viewing a malicious page. Affected product: Mozilla Firefox (pre-1.5.0.4). Root cause: improper handling of the content-length header. Impa...

CVE-2011-2668

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

CVE-2011-2668

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

CVE-2011-2668: Undefined Security Weakness

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...

PT-2020-7105

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5.0.3 and earlier Description The issue is related to a problem in processing the content-length header. Recommendations For versions 1.5.0.3 and earlier, update to a version that fixes the issue with processing the...

Security Advisory 2020-01-13-1 - uhttpd invalid data access via HTTP POST request (CVE-2019-19945)

DESCRIPTION An invalid data access can be triggered with an HTTP POST request to a CGI script specifying both Transfer-Encoding: chunked and a large Content-Length which exceeds 2^31 and is interpreted as a signed negative number. The negative content length is assigned to r→contentlength in...

HTTP Request Smuggling

waitress is vulnerable HTTP request smuggling. The vulnerability exists because the library mishandled HTTP request header by not correctly parsing special whitespace characters in the Transfer-Encoding header, causing the parser to use Content-Length header instead to determine the HTTP message...

PYSEC-2019-138

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special...

CVE-2019-16789

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special...

GHSA-M5FF-3WJ3-8PH4 HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress

Impact If a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Content-Length: 10 Transfer-Encoding: \x0bchunked For clarity: 0x0b == vertical...

PT-2019-20055

Name of the Vulnerable Software and Affected Versions Waitress versions prior to 1.4.1 Description The issue allows an attacker to send an invalid request that bypasses the front-end server and is parsed differently by Waitress, leading to a potential for HTTP request smuggling. This occurs when ...

CVE-2019-19337

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server...

CVE-2019-19337

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server...

HTTP Request Smuggling

waitress is vulnerable HTTP request smuggling. The vulnerability exists because the library mishandled HTTP request header by not correctly parsing the Transfer-Encoding header, causing the parser to use Content-Length header instead to determine the HTTP message body size, ignoring the requests...

CVE-2019-19337: Improper Input Validation

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server...

PT-2019-15814

Name of the Vulnerable Software and Affected Versions Red Hat Ceph Storage version 3 Description A flaw was found in the way the Ceph RADOS Gateway daemon handles S3 requests, allowing an authenticated attacker to cause a remote denial of service by sending a specially crafted HTTP Content-Length...