CVE-2011-5009 The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an....
MediumCVSS 5.0
EPSS 10.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ssoftware codesys | = 3.4-sp4 | No fix listed |
References
- aluigi.altervista.org
- 20111129 Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2 mailing-list
- 47018 third-party-advisory vendor-advisory
- 77388 vdb-entry
- 77389 vdb-entry
- www.us-cert.gov exploit us-government-resource
- codesys-cmpwebserver-dos(71533) vdb-entry