CVE-2010-2435

2010-06-2417:30:01

CWE-20

[email protected]

web.nvd.nist.gov

cve-2010-2435

weborf http server

denial of service

crash

unicode characters

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.9 Medium

AI Score

Confidence

High

0.15 Low

EPSS

Percentile

95.8%

JSON

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.

Affected configurations

NVD

Node

salvo_tomaselliweborf_http_serverRange≤0.12.1

salvo_tomaselliweborf_http_serverMatch0.10

salvo_tomaselliweborf_http_serverMatch0.11

salvo_tomaselliweborf_http_serverMatch0.12

CPENameOperatorVersion
salvo_tomaselli:weborf_http_serversalvo tomaselli weborf http serverle0.12.1
salvo_tomaselli:weborf_http_serversalvo tomaselli weborf http servereq0.10
salvo_tomaselli:weborf_http_serversalvo tomaselli weborf http servereq0.11
salvo_tomaselli:weborf_http_serversalvo tomaselli weborf http servereq0.12

CPE	Name	Operator	Version
salvo_tomaselli:weborf_http_server	salvo tomaselli weborf http server	le	0.12.1
salvo_tomaselli:weborf_http_server	salvo tomaselli weborf http server	eq	0.10
salvo_tomaselli:weborf_http_server	salvo tomaselli weborf http server	eq	0.11
salvo_tomaselli:weborf_http_server	salvo tomaselli weborf http server	eq	0.12