CVE-2008-5421 Information

Description

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

Reference

http://aluigi.altervista.org/adv/smsgheit-adv.txt http://secunia.com/advisories/29149 http://www.securityfocus.com/bid/28048