CVE-2011-1710 in XTier framework

Riassunto

di MITRE

Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 15/04/2011
• Divulgazione: 30/12/2011
• Moderazione: accettato
• Voce: VDB-59861
• CPE: pronto
• CWE: CWE-189 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.03589
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1710
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1710
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1710/