Description
at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field.
References
- 20120318 at32 ReverseProxy - Multiple HTTP Header Field Denial Of Service Vulnerability mailing-list
- at32reverse-proxy-dos(74133) vdb-entry
- 52553 vdb-entry
- 48460 third-party-advisory