1. CVE-Search
  2. CVE-2006-3124
ID CVE-2006-3124
Summary Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
References
Vulnerable Configurations
  • cpe:2.3:a:streamripper:streamripper:1.61.24:*:*:*:*:*:*:*
    cpe:2.3:a:streamripper:streamripper:1.61.24:*:*:*:*:*:*:*
  • cpe:2.3:a:streamripper:streamripper:1.61.25:*:*:*:*:*:*:*
    cpe:2.3:a:streamripper:streamripper:1.61.25:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 19707
confirm http://sourceforge.net/project/shownotes.php?release_id=442126
debian DSA-1158
gentoo GLSA-200609-01
misc http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c
osvdb 28178
secunia
  • 21579
  • 21658
  • 21749
  • 21801
suse SUSE-SR:2006:021
vupen ADV-2006-3387
xf streamripper-httpheader-bo(28567)
Last major update 20-07-2017 - 01:32
Published 26-08-2006 - 21:04
Last modified 20-07-2017 - 01:32
Back to Top