CVE-2009-4873

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2010-05-26

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Serv-u (Rhinosoft)

References

• http://secunia.com/advisories/37228
• http://www.rangos.de/ServU-ADV.txt
• http://www.securityfocus.com/bid/36895
• http://www.vupen.com/english/advisories/2009/3116