CVE-2018-7582
high · 7.5WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
7.5
CVSS
36.4%
EPSS (exploit prob.)
98th
EPSS percentile
2018-03-09
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| weblogexpert | weblog_expert | 9.4 |
Check a specific version with /api/v1/cve/match.
References
- http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt
- http://packetstormsecurity.com/files/146698/WebLog-Expert-Web-Server-Enterprise-9.4-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/44271/
- http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt
- http://packetstormsecurity.com/files/146698/WebLog-Expert-Web-Server-Enterprise-9.4-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/44271/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-7582