CVE-2010-0552 Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a lo...
HighCVSS 7.5
EPSS 4.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geopp geo++ gncaster | <= 1.4.0.7 | No fix listed |
| geopp geo++ gncaster | = 1.4.0.0 | No fix listed |
References
- 62011 vdb-entry
- 38323 third-party-advisory vendor-advisory
- www.redteam-pentesting.de exploit
- 20100127 [RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs mailing-list
- gncaster-httpget-code-execution(55974) vdb-entry