CVE-2007-5036
AirDefense Airsensor M520 4.3.1.1 and 4.4.1.4 - Authenticated Denial of Service via Crafted HTTPS Query String
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-5036. PoCs published by Alex Hernandez, alt3kx.
AI-analyzed exploit summary This Perl script demonstrates a Denial of Service (DoS) and potential buffer overflow vulnerability in Airsensor M520 HTTPD by sending a crafted HTTPS request with URL-encoded payloads to specific CGI endpoints. The exploit triggers a crash in the HTTPS service, as evidenced by the provided debug logs.
Description
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
Exploits (2)
This Perl script demonstrates a Denial of Service (DoS) and potential buffer overflow vulnerability in Airsensor M520 HTTPD by sending a crafted HTTPS request with URL-encoded payloads to specific CGI endpoints. The exploit triggers a crash in the HTTPS service, as evidenced by the provided debug logs.
This repository references CVE-2007-5036, a vulnerability in Airsensor M520 HTTPd allowing unauthenticated remote denial of service or buffer overflow. It points to an Exploit-DB entry but contains no actual exploit code or technical details.