CVE-2007-6326 Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
MediumCVSS 5.0
EPSS 7.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sergey lyubka simple httpd | = 1.3 | No fix listed |
References
- shinnai.altervista.org exploit
- 26813 exploit vdb-entry
- simplehttpd-aux-dos(38980) vdb-entry
- 4717 exploit