SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2009-2108

git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Reference:

https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html

http://www.openwall.com/lists/oss-security/2009/06/12/1

gitdaemon-xinetd-dos(51083)

http://article.gmane.org/gmane.comp.version-control.git/120733

http://thread.gmane.org/gmane.comp.version-control.git/120724


30430



423868



247768



909



194555



282