CVE-2007-0838

FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service (infinite loop) via a HOST: header with a hostname and port number that refers to the server itself.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-02-08

Last modified

2024-08-07

Affected products

• Freeproxy (Freeproxy)

References

• http://marc.info/?l=bugtraq&m=117086856902907&w=2
• http://marc.info/?l=full-disclosure&m=117085666921871&w=2
• http://osvdb.org/33116
• http://secunia.com/advisories/24064
• http://www.handcraftedsoftware.org/index.php?page=3&mode=article&k=60
• http://www.securityfocus.com/bid/22445
• http://www.vupen.com/english/advisories/2007/0514
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32303