Description
The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.
References
- http://aluigi.altervista.org/adv/smsgheit-adv.txt
- 29149 third-party-advisory
- 28048 vdb-entry