CVE-2021-47752

Summary

AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the service unresponsive.

Affected Software

Weaknesses

• CWE-770: Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://www.exploit-db.com/exploits/50629

References

• https://www.exploit-db.com/exploits/50629
• http://sylkat-tools.rf.gd/awebserver.htm
• https://play.google.com/store/apps/details?id=com.sylkat.apache&hl=en

• ←Previous
• Next→