CVE-2004-2117

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• TinyServer 1.1 - Denial of Service2004-01-24 · dos · windows · Verified

Impact

Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.

Affected products

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=107496530806730&w=2
• http://secunia.com/advisories/10707
• http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
• http://www.osvdb.org/3709
• http://www.securityfocus.com/bid/9485
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14928
• http://marc.info/?l=bugtraq&m=107496530806730&w=2
• http://secunia.com/advisories/10707
• http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
• http://www.osvdb.org/3709
• http://www.securityfocus.com/bid/9485
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14928