LiteSpeed Web Server 'httpreq.cpp' Use After Free Denial of Service Vulnerability
BID:74207
Info
LiteSpeed Web Server 'httpreq.cpp' Use After Free Denial of Service Vulnerability
| Bugtraq ID: | 74207 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Apr 14 2015 12:00AM |
| Credit: | Denis Andzakovic |
| Vulnerable: |
Litespeedtech Litespeed Web Server 1.3.9 |
| Not Vulnerable: |
Litespeedtech Litespeed Web Server 1.3.10 |
Discussion
LiteSpeed Web Server 'httpreq.cpp' Use After Free Denial of Service Vulnerability
LiteSpeed Web Server is prone to a denial-of-service vulnerability.
Successfully exploiting this issue may allow remote attackers to gain access to sensitive information and to crash the server resulting in a denial-of-service condition.
LiteSpeed Web Server 1.3.9 and prior are vulnerable.
LiteSpeed Web Server is prone to a denial-of-service vulnerability.
Successfully exploiting this issue may allow remote attackers to gain access to sensitive information and to crash the server resulting in a denial-of-service condition.
LiteSpeed Web Server 1.3.9 and prior are vulnerable.