CVE-2008-5674
Darkwet webcamXP < 3.72.440.0 - Denial of Service and Memory Read via Invalid camnum and id Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-5674. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The provided text describes a vulnerability in webcamXP versions 3.72.440 and 4.05.280 beta, where improper input validation leads to information disclosure and DoS. The example URL demonstrates a potential attack vector by manipulating the 'id' parameter.
Description
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
Exploits (2)
The provided text describes a vulnerability in webcamXP versions 3.72.440 and 4.05.280 beta, where improper input validation leads to information disclosure and DoS. The example URL demonstrates a potential attack vector by manipulating the 'id' parameter.
The provided text describes a vulnerability in webcamXP where improper input validation leads to information disclosure or denial-of-service. The exploit involves sending malformed requests with extreme values for the 'camnum' parameter.