Lucene search

K
cveMitreCVE-2004-0774
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0774

2004-11-0305:00:00
mitre
web.nvd.nist.gov
39
realnetworks
helix universal server
denial of service
cve-2004-0774
nvd
cpu exhaustion
memory exhaustion
post request
content-length header

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

71.1%

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

Affected configurations

Nvd
Node
realnetworkshelix_universal_mobile_server_and_gatewayRange10.3.1.716
OR
realnetworkshelix_universal_serverRange9.0.4.958
OR
realnetworkshelix_universal_serverMatch9.0.2
VendorProductVersionCPE
realnetworkshelix_universal_mobile_server_and_gateway*cpe:2.3:a:realnetworks:helix_universal_mobile_server_and_gateway:*:*:*:*:*:*:*:*
realnetworkshelix_universal_server*cpe:2.3:a:realnetworks:helix_universal_server:*:*:*:*:*:*:*:*
realnetworkshelix_universal_server9.0.2cpe:2.3:a:realnetworks:helix_universal_server:9.0.2:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

71.1%

Related for CVE-2004-0774