CVE-2000-0470

Allegro RomPager 2.10 - URL Request Denial of Service

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2000-0470 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBAllegro RomPager 2.10 - URL Request Denial of ServiceExploitDB exploitby netsecExploit1 file
ExploitDB
PoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact provides a one-liner Perl command that sends a malformed HTTP request with an overly long Authenticate header to crash the Allegro RomPager HTTP server, constituting a denial-of-service exploit.

Backdoor review

No backdoor observed in reviewed code

The artifact is a text description of a denial-of-service vulnerability in Allegro RomPager, accompanied by a proof-of-concept command line. The PoC constructs a malformed HTTP request with an overly long Authenticate header and sends it via netcat. No backdoor, deceptive payload, or concealed operator-directed harm is present.

ClassificationExploit
Model confidence95%
AuthenticationNot required
LanguagesPerlshell
Target softwareAllegro RomPager
Attack typesdenial of service
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains executable code (a Perl one-liner piped to netcat) that sends a specifically malformed request to trigger a crash, which is the definition of an exploit.

exploits/hardware/dos/10237.txt:15

Requirements

  • Target must be running Allegro RomPager HTTP server on port 80.exploits/hardware/dos/10237.txt:1
  • Attacker must have network access to the target and ability to execute Perl and netcat.exploits/hardware/dos/10237.txt:15

Observed behavior

  • Sends an HTTP GET request with an Authenticate header containing 1024 'A' characters to the target server on port 80.exploits/hardware/dos/10237.txt:15
  • Causes the RomPager server and possibly the parent device to crash, resulting in denial of service.exploits/hardware/dos/10237.txt:3
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Command Line
Payload withheldThe PoC sends a single HTTP request with a 1024-byte Authenticate header to the target, consistent with the described denial-of-service vulnerability.exploits/hardware/dos/10237.txt:15
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

References

4