cve/2009/CVE-2009-1956.md

CVE-2009-1956

Description

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Dokukin1/Metasploitable
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/NikulinMS/13-01-hw
• https://github.com/Zhivarev/13-01-hw
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/zzzWTF/db-13-01