CVE

Id
29181  
CVE No.
CVE-2007-5824  
Status
Candidate  
Description
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in the ws_decodepassword function; or (2) a header line without a ":" character, which triggers a crash in the ws_getheaders function.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306113 29181 CVE-2007-5824 BUGTRAQ:20071102 Re: [UPH-07-01] Firefly Media Server DoS  View
306114 29181 CVE-2007-5824 URL:http://www.securityfocus.com/archive/1/archive/1/483215/100/0/threaded  View
306115 29181 CVE-2007-5824 BUGTRAQ:20071102 [UPH-07-01] Firefly Media Server DoS  View
306116 29181 CVE-2007-5824 URL:http://www.securityfocus.com/archive/1/archive/1/483210/100/0/threaded  View
306117 29181 CVE-2007-5824 BUGTRAQ:20071102 [UPH-07-02] Firefly Media Server DoS  View
306118 29181 CVE-2007-5824 URL:http://www.securityfocus.com/archive/1/archive/1/483211/100/0/threaded  View
306119 29181 CVE-2007-5824 MILW0RM:4600  View
306120 29181 CVE-2007-5824 URL:http://www.milw0rm.com/exploits/4600  View
306121 29181 CVE-2007-5824 MISC:http://bugs.gentoo.org/show_bug.cgi?id=200110  View
306122 29181 CVE-2007-5824 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=98211&release_id=548679  View
306123 29181 CVE-2007-5824 DEBIAN:DSA-1597  View
306124 29181 CVE-2007-5824 URL:http://www.debian.org/security/2008/dsa-1597  View
306125 29181 CVE-2007-5824 GENTOO:GLSA-200712-18  View
306126 29181 CVE-2007-5824 URL:http://www.gentoo.org/security/en/glsa/glsa-200712-18.xml  View
306127 29181 CVE-2007-5824 BID:26309  View
306128 29181 CVE-2007-5824 URL:http://www.securityfocus.com/bid/26309  View
306129 29181 CVE-2007-5824 SECUNIA:28269  View
306130 29181 CVE-2007-5824 URL:http://secunia.com/advisories/28269  View
306131 29181 CVE-2007-5824 SECUNIA:30661  View
306132 29181 CVE-2007-5824 URL:http://secunia.com/advisories/30661  View
306133 29181 CVE-2007-5824 XF:firefly-decodepassword-dos(38242)  View
306134 29181 CVE-2007-5824 URL:http://xforce.iss.net/xforce/xfdb/38242  View
306135 29181 CVE-2007-5824 XF:firefly-getheaders-dos(38241)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54180 JVNDB-2007-002872 EDImage.ocx の EDraw Flowchart ActiveX コントロールにおける絶対パストラバーサルの脆弱性 EDImage.ocx の EDraw Flowchart ActiveX コントロールには、絶対パストラバーサルの脆弱性が存在します。 CVE-2007-5826 29181 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002872.html  View