Description
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
References
- http://secway.org/advisory/AD20050830.txt
- bnbteasytracker-client-dos(22058) vdb-entry
- 20050830 BNBT EasyTracker Remote Denial of Service Vulnerability mailing-list
- 14700 vdb-entry
- 16613 third-party-advisory