5
CVE-2007-6326
- EPSS 7.25%
- Veröffentlicht 13.12.2007 19:46:00
- Zuletzt bearbeitet 16.06.2026 22:47:50
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sergey Lyubka ≫ Simple Httpd Version1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.25% | 0.935 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://shinnai.altervista.org/exploits/txt/TXT_8kXDua0a0Tl5Vm5LU3ms.html
http://www.securityfocus.com/bid/26813
https://exchange.xforce.ibmcloud.com/vulnerabilities/38980
https://www.exploit-db.com/exploits/4717