Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BRS WebWeaver httpd `User-Agent`远程缓冲区溢出漏洞
Vulnerability Description
BRS WebWeaver是一款集成化的小型快速的HTTP和FTP服务程序,提供目录保护功能,适用于Windows 9x/NT操作系统。 BRS WebWeaver httpd不正确处理用户提交的`User-Agent`字段数据,远程攻击者可以利用这个漏洞对服务程序进行拒绝服务攻击。 如果用户提交的HTTP请求中的`User-Agent`字段包含超长字符串,当BRS WebWeaver httpd解析时,可导致程序崩溃,停止所有响应,产生拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A