CVE-2008-5421

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

Link	Resource
http://secunia.com/advisories/29149	Vendor Advisory
http://aluigi.altervista.org/adv/smsgheit-adv.txt	Exploit
http://www.securityfocus.com/bid/28048

Configuration 1

cpe:2.3:a:netwin:smsgate:1.0r:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:1.0h:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:*:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:1.0w:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:1.1m:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:1.0c:*:*:*:*:*:*:* cpe:2.3:a:netwin:smsgate:1.0a:*:*:*:*:*:*:*

---

Published : 2008-12-11 03:30

Updated : 2008-12-12 05:00

---

NVD link : CVE-2008-5421

Mitre link : CVE-2008-5421

Netwin

Smsgate

CWE-399