CVE-2010-2435

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-06-24

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Weborf Http Server (Salvo Tomaselli)

References

• http://freshmeat.net/projects/weborf/releases/318531
• http://secunia.com/advisories/40322
• http://www.securityfocus.com/archive/1/511953/100/0/threaded
• http://www.securityfocus.com/bid/41064