Description
application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
References
- 11161 vdb-entry
- 12523 third-party-advisory
- A091304-2 vendor-advisory
- xpressa-applicationcgi-dos(17346) vdb-entry