VULNERABILITY INTELLIGENCE

CVE-2008-5421

CVSS score5 MEDIUM
EPSS probability1.44%
CISA KEVNot currently listed
Published2008-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

Primary references