OSVDB ID: 39533

Title: Streamripper lib/http.c httplib_parse_sc_header() Function Multiple HTTP Header Processing Overflows

Info

Disclosure

Aug 12, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

Security Tracker: 1018553
CVE ID: 2007-4337 (see also: NVD)
Bugtraq ID: 25278
Secunia Advisory ID: 26406 26814 33061
VUPEN Advisory: ADV-2007-2858
Vendor URL: http://archives.neohapsis.com/archives/bugtraq/2007-08/0170.html
Vendor Specific News/Changelog Entry: http://lists.debian.org/debian-security-announce/2008/msg00275.html
Other Advisory URL: http://sourceforge.net/project/shownotes.php?group_id=6172&release_id=531738
http://www.gentoo.org/security/en/glsa/glsa-200709-03.xml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/39533