medium5.0Public exploit code
CVE-2007-5036
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTT…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Airsensor M520 - HTTPd Remote Denial of Service / Buffer Overflow (PoC)2007-09-18 · dos · hardware · Verified
Impact
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Airdefense | Airsensor | Version m520 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/26869
- http://www.securityfocus.com/bid/25715
- http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC
- http://www.vupen.com/english/advisories/2007/3226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36691
- https://www.exploit-db.com/exploits/4426
- http://secunia.com/advisories/26869
- http://www.securityfocus.com/bid/25715
- http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC
- http://www.vupen.com/english/advisories/2007/3226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36691
- https://www.exploit-db.com/exploits/4426