NVD

Id
57875  
Name
CVE-2007-5824  
Description
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in the ws_decodepassword function; or (2) a header line without a ":" character, which triggers a crash in the ws_getheaders function.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-11-05  
Modified Date
2008-09-10  
Seq
2007-5824  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296202 57875 CVE-2007-5824 http://bugs.gentoo.org/show_bug.cgi?id=200110  View
296203 57875 CVE-2007-5824 http://sourceforge.net/project/shownotes.php?group_id=98211&release_id=548679  View
296204 57875 CVE-2007-5824 DSA-1597  View
296205 57875 CVE-2007-5824 GLSA-200712-18  View
296206 57875 CVE-2007-5824 4600  View
296207 57875 CVE-2007-5824 20071102 [UPH-07-01] Firefly Media Server DoS  View
296208 57875 CVE-2007-5824 20071102 [UPH-07-02] Firefly Media Server DoS  View
296209 57875 CVE-2007-5824 20071102 Re: [UPH-07-01] Firefly Media Server DoS  View
296210 57875 CVE-2007-5824 26309  View
296211 57875 CVE-2007-5824 firefly-getheaders-dos(38241)  View
296212 57875 CVE-2007-5824 firefly-decodepassword-dos(38242)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54178 JVNDB-2007-002870 Firefly Media Server の mt-dappd の webserver.c におけるサービス運用妨害 (DoS) の脆弱性 Firefly Media Server の mt-dappd の webserver.c には、サービス運用妨害 (NULL デリファレンスおよびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-5824 29179 CVE-2007-5824 57875 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002870.html 2007-11-05 2012-06-26 View