• info
• discussion
• exploit
• solution
• references

OmniHTTPD Long Request Buffer Overflow Vulnerability

OmniHTTPD is prone to a remotely exploitable buffer overflow condition. This problem is in the handling of requests containing overly long headers.

Exploitation of this issue may cause a denial of service condition or result in execution of arbitrary attacker-supplied instructions with the privileges of the webserver process.

This issue was reported in version 2.09 of the software. Other versions may also be affected.