critical10.0Public exploit code
CVE-2007-6454
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to caus…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PeerCast 0.12 - HandshakeHTTP Multiple Buffer Overflow Vulnerabilities2007-12-17 · dos · linux · Verified
Impact
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peercast | Peercast | through 0.1217 through svn_344 Versions 0.1211, 0.1212, 0.1215 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/peercasthof-adv.txt
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457300
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://secunia.com/advisories/28120
- http://secunia.com/advisories/28260
- http://secunia.com/advisories/28719
- http://secunia.com/advisories/30325
- http://securityreason.com/securityalert/3461
- http://www.debian.org/security/2007/dsa-1441
- http://www.debian.org/security/2008/dsa-1583
- http://www.gentoo.org/security/en/glsa/glsa-200801-22.xml
- http://www.securityfocus.com/archive/1/485199/100/0/threaded
- http://www.securityfocus.com/bid/26899
- http://www.vupen.com/english/advisories/2007/4246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39075
- http://aluigi.altervista.org/adv/peercasthof-adv.txt
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457300
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://bugs.gentoo.org/show_bug.cgi?id=202747
- http://secunia.com/advisories/28120