CVE-2011-1710 in XTier framework

Summary

Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 04/15/2011
• Disclosure: 12/30/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-59861
• CPE: ready
• CWE: CWE-189 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01726
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1710
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1710
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1710/