CVE-2006-3124
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 20%
from disclosure to weapon3 days
Published on NVDAug 26
1st PoC+3d
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2274exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2277⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.chttp://secunia.com/advisories/21579http://secunia.com/advisories/21658http://secunia.com/advisories/21749http://secunia.com/advisories/21801http://security.gentoo.org/glsa/glsa-200609-01.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/28567http://sourceforge.net/project/shownotes.php?release_id=442126http://www.debian.org/security/2006/dsa-1158http://www.novell.com/linux/security/advisories/2006_21_sr.htmlhttp://www.osvdb.org/28178http://www.securityfocus.com/bid/19707