NetSight
medium5.0Public exploit code

CVE-2009-0751

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.

Affected products

VendorProductAffected versions
YawsYaws
through 1.79
Versions 1.50, 1.51, 1.52, 1.53, 1.54

Weakness classification

References