CVE-2008-5421

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-11 · updated 2026-06-16
Weakness: CWE-399

Description

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

Affected products

NetWin Smsgate: through 1.1n; 1.0a, 1.0c, 1.0h, 1.0r, 1.0w, 1.1m

References

http://aluigi.altervista.org/adv/smsgheit-adv.txt
http://secunia.com/advisories/29149
http://www.securityfocus.com/bid/28048
http://aluigi.altervista.org/adv/smsgheit-adv.txt
http://secunia.com/advisories/29149
http://www.securityfocus.com/bid/28048

Get alerted when CVE-2008-5421 or the next vulnerability affects your stack