[Forgot Password]
Login  Register Subscribe

23631

 
 

115036

 
 

95906

 
 

909

 
 

77949

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-2054

Date: (C)2010-06-15   (M)2015-12-16
 
CVSS Score: 10.0Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a large integer in the Content-Length HTTP header, aka bug #3001915. NOTE: some of these details are obtained from third party information.

Reference:
SECUNIA-40018
ADV-2010-1312
IAVM:2011-A-0149
IAVM:2011-A-0160
http://marc.info/?l=bugtraq&m=127549079109192&w=2
http://sblim.cvs.sourceforge.net/viewvc/sblim/sfcb/httpAdapter.c?r1=1.85&r2=1.86
http://sourceforge.net/tracker/index.php?func=detail&aid=3001915&group_id=128809&atid=712784

CWE    1
CWE-189
OVAL    2
oval:org.secpod.oval:def:100586
oval:org.secpod.oval:def:100585

© 2013 SecPod Technologies