CVE Vulnerability Catalog

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities.

A vulnerability in the inets HTTP server in Erlang/OTP allows a remote unauthenticated attacker to read files in a mod_auth protected directory by requesting them with different casing, on case-insensitive filesystems. The path check does not use the caseless option, allowing authentication bypass.

The httpc module in Erlang/OTP inets has an improper validation of specified quantity vulnerability. A malicious or compromised HTTP server can degrade availability by returning a numeric header with a very long run of digits, causing expensive integer conversion.

A vulnerability in the inets HTTP server in Erlang/OTP allows a remote unauthenticated attacker to cause denial of service by sending valid headers with a large Content-Length and then stalling. The server cancels the request timeout after header parsing and does not re-arm it, leaving workers waiting indefinitely.

The eldap module in Erlang/OTP has an improper validation of specified quantity vulnerability. A malicious or compromised LDAP server can degrade availability by returning a referral URL with a very long port, causing expensive integer conversion.

The snmp module in Erlang/OTP has an improper validation of specified quantity vulnerability. A remote attacker can degrade availability by sending an SNMP message containing a BER INTEGER with an arbitrarily large length field, causing expensive bignum arithmetic.

A vulnerability in the inets HTTP server in Erlang/OTP allows a remote unauthenticated attacker to cause denial of service by opening and holding many connections. The max_clients option is not set by default, allowing unlimited simultaneous connections, leading to resource exhaustion.

A vulnerability in the HTTP server (inets httpd) in Erlang/OTP allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker handling the connection is never released and no timeout reclaims it, so repeating such requests across connections occupies all available workers, blocking legitimate clients. The default configuration is affected and no authentication is required.

A vulnerability in the inets HTTP server in Erlang/OTP allows a remote unauthenticated attacker to read files in a mod_auth protected directory by prefixing the request path with an extra slash. URI normalization does not collapse double slashes, causing the path check to miss the protected directory.

The inets HTTP server in Erlang/OTP does not implement obs-fold (header continuation lines), which may lead to HTTP request smuggling vulnerabilities. Every CRLF followed by a non-CRLF starts a new header, which can be exploited by an attacker.

This CVE candidate has been rejected and should not be used. The number was assigned in error, and all references and descriptions have been removed to prevent accidental usage.

The stdlib module in Erlang/OTP has an improper validation of specified quantity vulnerability. A remote attacker can degrade availability by supplying a URI with a very long port, causing expensive integer conversion.

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this to execute arbitrary code with root privileges.

The httpc HTTP client in Erlang/OTP does not enforce a limit on the total size of response headers. The max_header_size option defaults to nolimit, allowing a malicious server to send an arbitrarily large number of headers, leading to unbounded memory allocation and potential BEAM VM crash.

A Cross-Site Request Forgery (CSRF) vulnerability in Talassoft Industrial Management Software by TMT Machine Industry and Trade Ltd. Co. allows unauthorized actions to be performed on behalf of an authenticated user.

A missing authentication for critical function vulnerability in Talassoft Industrial Management Software by TMT Machine Industry and Trade Ltd. Co. allows authentication bypass and access to administrative functions without logging in.

SQL injection vulnerability in Talassoft Industrial Management Software by TMT Machine Industry and Trade Ltd. Co. due to improper neutralization of special elements in SQL commands. Affects versions from V.4 before V.16.

Denial-of-service vulnerability in affected Logix platforms due to improper validation of input length during CIP message processing. Can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover.

Vulnerability in the Redundancy Module Configuration Tool (RMConfigTool.exe) where it searches system path directories for a required DLL, some of which may be writable by standard users due to incorrect default permissions. A local attacker can place a malicious DLL that gets loaded when an administrator runs the tool, executing with Administrator/SYSTEM privileges.

Vulnerability in the Redundancy Module Configuration Tool (RM3ConfigTool.exe) where it searches system path directories for a required DLL, some of which may be writable by standard users due to incorrect default permissions. A local attacker can place a malicious DLL that gets loaded when an administrator runs the tool, executing with Administrator/SYSTEM privileges.