medium4.0Public exploit code
CVE-2009-4658
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xerver HTTP Server 4.32 - Remote Denial of Service2009-09-18 · dos · windows · Verified
Impact
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omidrouhani | Xerver | Version 4.32 |