Denial of Service Vulnerability in NetWin SmsGate Web Administration Service
CVE-2008-5421

Currently unrated

Key Information:

Vendor

Netwin

Status
Smsgate
Vendor
CVE Published:
11 December 2008

What is CVE-2008-5421?

The SSL web administration service in NetWin SmsGate versions 1.1n and prior is susceptible to a denial of service attack. This vulnerability can be exploited by remote attackers who manipulate the Content-Length HTTP header. Attackers may submit excessively large integers, invalid values such as negative integers, or even completely omit the Content-Length header, resulting in a service hang. This can disrupt normal operations and hinder access to the web administration interface.

References

http://aluigi.altervista.org/adv/smsgheit-adv.txt
x_refsource_MISC
http://secunia.com/advisories/29149
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/28048
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.