Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-6629

Опубликовано: 04 янв. 2008
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*
Версия до 0.1.15 (включая)

EPSS

Процентиль: 80%
0.01362
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line.

EPSS

Процентиль: 80%
0.01362
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other