Vulnerabilities > CVE-2005-1402 - Unspecified vulnerability in Mtp-Target

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
mtp-target
exploit available

Summary

Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison.

Vulnerable Configurations

Part Description Count
Application
Mtp-Target
1

Exploit-Db

descriptionMtp-Target Server 1.2.2 Memory Corruption Vulnerability. CVE-2005-1402. Dos exploits for multiple platform
idEDB-ID:25584
last seen2016-02-03
modified2005-05-02
published2005-05-02
reporterLuigi Auriemma
sourcehttps://www.exploit-db.com/download/25584/
titleMtp-Target Server 1.2.2 Memory Corruption Vulnerability