CVE-2007-2367 Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.
HighCVSS 10.0
EPSS 3.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wserve http server | = 4.6 | No fix listed |
References
- 2647 third-party-advisory
- 20070405 Wserve HTTP Server 4.6 Version (Long Directory Name) Buffer Overflow - Denial Of Service mailing-list
- 23341 vdb-entry