CVEvulnerability
CVE-2005-2806
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-09-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
Affected configurations
• trevor hogan bnbt 7.5 beta release2
• trevor hogan bnbt 7.5 beta release3
• trevor hogan bnbt 7.7 2004-10-27 r3
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://marc.info/?l=bugtraq&m=112542080127451&w=2 marc.info
- http://secunia.com/advisories/16613/ secunia.com
- http://secway.org/advisory/AD20050830.txt Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14700 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22058 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=112542080127451&w=2 marc.info
- http://secunia.com/advisories/16613/ secunia.com
- http://secway.org/advisory/AD20050830.txt Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14700 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22058 exchange.xforce.ibmcloud.com