CVE-2008-5421

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

🔗 References (6)

• cve@mitrehttp://aluigi.altervista.org/adv/smsgheit-adv.txt
• cve@mitrehttp://secunia.com/advisories/29149
• cve@mitrehttp://www.securityfocus.com/bid/28048
• af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/smsgheit-adv.txt
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29149
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/28048