« Volver al listado

CVE-2010-2435

Estado: ModificadaMedia (5)—

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Salvo Tomaselli — Weborf Http Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2435",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-06-24T17:30:01.000",
  "references": [
    {
      "url": "http://freshmeat.net/projects/weborf/releases/318531",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/40322",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511953/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/41064",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freshmeat.net/projects/weborf/releases/318531",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/40322",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511953/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/41064",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers."
    },
    {
      "lang": "es",
      "value": "Weborf HTTP Server V0.12.1 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) a través de caracteres Unicode en una cabecera Connection HTTP, y probablemente otra cabecera. \r\n"
    }
  ],
  "lastModified": "2026-06-16T23:20:44.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:salvo_tomaselli:weborf_http_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9411FFCD-FAAB-4DD6-B59A-81AED7BE684F",
              "versionEndIncluding": "0.12.1"
            },
            {
              "criteria": "cpe:2.3:a:salvo_tomaselli:weborf_http_server:0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64008671-E626-4573-8E47-71EC5EA5BB9A"
            },
            {
              "criteria": "cpe:2.3:a:salvo_tomaselli:weborf_http_server:0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63ADAB8B-ADF6-4B4A-94D7-CE78A2A7041A"
            },
            {
              "criteria": "cpe:2.3:a:salvo_tomaselli:weborf_http_server:0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "361DE32B-9D5B-49A4-9633-70219BB72C62"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}