CVE-2007-3159 http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.
MediumCVSS 5.0
EPSS 2.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| miniweb http server | = 0.8.1 | No fix listed |
| miniweb http server | = 0.8.19 | No fix listed |
References
- 37185 vdb-entry
- 25528 third-party-advisory vendor-advisory
- 24375 exploit vdb-entry
- miniweb-contentlength-dos(34774) vdb-entry
- 4046 exploit