CVE-2014-5329 Denial of service in GIGAPOD 2010 / GIGAPOD 3 Appliance model
A flaw in the Apache HTTP server used by GIGAPOD file servers allows remote attackers to cause a denial-of-service condition via crafted HTTP requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-5329?
CVE-2014-5329 is a high-severity denial of service vulnerability in TripodWorks CO.,LTD. GIGAPOD 2010 / GIGAPOD 3 Appliance model, published on 8 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition.
Which versions are affected by CVE-2014-5329?
It affects 3 products.
Products include Tripodworks Gigapod 2010 Firmware, Tripodworks Gigapod 3 Firmware, Tripodworks Gigapod Officehard Firmware.
How do I fix CVE-2014-5329?
No fix has been published for CVE-2014-5329 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2014-5329 being exploited?
There is no known exploitation of CVE-2014-5329 in the wild and no public exploit code.
Public exploit code: 2 Exploit-DB entries.
Sources
Also known as GHSA-mcww-h5h9-995g.