CVE-2007-5067

Imatix Xitami - Memory Corruption

Title source: rule

Description

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16753
exploitdb WORKING POC VERIFIED
by h07 · pythonremotewindows
https://www.exploit-db.com/exploits/4450
metasploit WORKING POC NORMAL
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/xitami_if_mod_since.rb

Scores

EPSS 0.8298
EPSS Percentile 99.2%

Classification

CWE
CWE-119
Status draft

Affected Products (1)

imatix/xitami

Timeline

Published Sep 24, 2007
Tracked Since Feb 18, 2026