CVE-2007-6454 - Secunia.com

CVE Reference: CVE-2007-6454
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6454

Description: Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39075 SREASON http://securityreason.com/securityalert/3461 SAID Secunia Advisory: SA30325 Secunia Advisory: SA28719 Secunia Advisory: SA28120 Secunia Advisory: SA28260 MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457300 http://bugs.gentoo.org/show_bug.cgi?id=202747 http://aluigi.altervista.org/adv/peercasthof-adv.txt GENTOO http://www.gentoo.org/security/en/glsa/glsa-200801-22.xml DEBIAN http://www.debian.org/security/2007/dsa-1441 http://www.debian.org/security/2008/dsa-1583 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=202747 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/485199/100/0/threaded BID 26899

Return to the previous page.

Secunia