Samsung DVR SHR-2040 HTTPD Denial of Service Vulnerability

Bugtraq ID:	31047
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-4380
Remote:	Yes
Local:	No
Published:	Sep 07 2008 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	Alex Hernandez
Vulnerable:	Samsung SHR-2040 0
Not Vulnerable:

Samsung DVR SHR-2040 HTTPD Denial of Service Vulnerability

Samsung's DVR SHR-2040 is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash the HTTPD service on the device, denying service to legitimate users.

This vulnerability is reported in the SHR-2040 device with firmware B3.03E-K1.53-V2.19_0705281908.

Samsung DVR SHR-2040 HTTPD Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/31047.pl

Samsung DVR SHR-2040 HTTPD Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Samsung DVR SHR-2040 HTTPD Denial of Service Vulnerability

References:

• Samsung Homepage (Samsung)
  
• SYBSEC-ADV16: Samsung DVR SHR 2040 HTTPD Denial Of Service Vulnerabilities (syb Information Security)