NetSight
medium5.0Public exploit code

CVE-2010-2435

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and poss…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.

Affected products

VendorProductAffected versions
Salvo TomaselliWeborf Http Server
through 0.12.1
Versions 0.10, 0.11, 0.12

Weakness classification

References