Vulnerability Details CVE-2008-5421
The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.0%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2008-5421
-
cpe:2.3:a:netwin:smsgate:*
-
cpe:2.3:a:netwin:smsgate:1.0a
-
cpe:2.3:a:netwin:smsgate:1.0c
-
cpe:2.3:a:netwin:smsgate:1.0h
-
cpe:2.3:a:netwin:smsgate:1.0r
-
cpe:2.3:a:netwin:smsgate:1.0w
-
cpe:2.3:a:netwin:smsgate:1.1m