CVE Vulnerabilities

CVE-2004-1680

Published: Sep 13, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.

Affected Software

Name Vendor Start Version End Version
Xpressa Pingtel 1.2.5 1.2.5
Xpressa Pingtel 1.2.7.4 1.2.7.4
Xpressa Pingtel 1.2.8 1.2.8
Xpressa Pingtel 2.0 2.0
Xpressa Pingtel 2.0.1 2.0.1
Xpressa Pingtel 2.1.11.24 2.1.11.24

References