Lucene search
HistoryDec 24, 2009 - 4:30 p.m.
CVE-2009-3305
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.02
Percentile
88.9%
Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors.
Affected configurations
Node
pps.jussieupolipoMatch1.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pps.jussieu | polipo | 1.0.4 | cpe:2.3:a:pps.jussieu:polipo:1.0.4:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2009-12-24 16:30:00
cve
cve
CVE-2009-3305
2009-12-24 16:30:00
ubuntucve
ubuntucve
CVE-2009-3305
2009-12-24 00:00:00
cvelist
cvelist
CVE-2009-3305
2009-12-24 16:00:00
debiancve
debiancve
CVE-2009-3305
2009-12-24 16:30:00
exploitdb
exploitdb
Polipo 1.0.4 - Remote Memory Corruption (PoC)
2009-12-07 00:00:00
openvas
openvas
Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
2009-12-08 00:00:00
Debian: Security Advisory (DSA-2002-1)
2023-03-08 00:00:00
securityvulns
securityvulns
polipo proxy server DoS
2010-02-22 00:00:00
[SECURITY] [DSA-2002-1] New polipo packages fix denial of service
2010-02-22 00:00:00
debian
debian
[SECURITY] [DSA-2002-1] New polipo packages fix denial of service
2010-02-19 15:36:51
[SECURITY] [DSA-2002-1] New polipo packages fix denial of service
2010-02-19 15:36:51
nessus
nessus
Debian DSA-2002-1 : polipo - denial of service
2010-02-24 00:00:00
osv
osv
polipo - denial of service
2010-02-19 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.02
Percentile
88.9%
Related for NVD:CVE-2009-3305