CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via…

published November 5, 2007

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in the ws_decodepassword function; or (2) a header line without a ':' character, which triggers a crash in the ws_getheaders function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05592 · 92.9th percentile
Published
2007-11-05T19:00Z
EPSS history
Timeline
  • 05 NOV 19:00Z
    webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via…
    cvelistv5