CVE-2004-1680

Published: Sep 13, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.

Affected (6)

Products: Pingtel: Xpressa

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Pingtel Xpressa	Version 1.2.5
Pingtel Xpressa	Version 1.2.7.4
Pingtel Xpressa	Version 1.2.8
Pingtel Xpressa	Version 2.0.1
Pingtel Xpressa	Version 2.0
Pingtel Xpressa	Version 2.1.11.24

References (8)

http://secunia.com/advisories/12523

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.atstake.com/research/advisories/2004/a091304-2.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/11161

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17346

Source: cve@mitre.org

http://secunia.com/advisories/12523

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.atstake.com/research/advisories/2004/a091304-2.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/11161

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17346

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.