CVE-2010-0496: Input Validation
Published Feb 3, 2010
·Updated
FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request for the / URI.
Affected Software
6 affected components
FreeBit ServersMan=3.1.5
apple iPhone OS=3.1.2
apple iPhone OS=3.1.2
All of the following
FreeBit ServersMan=3.1.5
Any of the following
apple iPhone OS=3.1.2
apple iPhone OS=3.1.2
Event History
Feb 3, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·07:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0496?
CVE-2010-0496 has been classified as a vulnerability that can lead to denial of service.
2
How does CVE-2010-0496 affect FreeBit ServersMan 3.1.5?
CVE-2010-0496 allows remote attackers to crash the FreeBit ServersMan daemon by sending a specific HEAD request.
3
What environments are affected by CVE-2010-0496?
CVE-2010-0496 affects FreeBit ServersMan 3.1.5 running on Apple iPhone OS 3.1.2.
4
Can CVE-2010-0496 lead to data loss?
While CVE-2010-0496 typically results in a service disruption, it does not indicate a direct risk of data loss.
5
How can I protect against CVE-2010-0496?
To mitigate CVE-2010-0496, consider upgrading to a patched version of FreeBit ServersMan or implementing firewall rules to restrict malicious requests.