CVE-2007-5036

Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."

• CWE-20
• CWE-119

• http://secunia.com/advisories/26869Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/25715
• http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoCExploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/3226
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36691
• https://www.exploit-db.com/exploits/4426
• http://secunia.com/advisories/26869Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/25715
• http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoCExploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/3226
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36691
• https://www.exploit-db.com/exploits/4426

Published

Sep 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5030Multiple integer overflows in Dibbler 0.6.0 allow remote att…
• CVE-2007-5031The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cp…
• CVE-2007-5032Cross-site request forgery (CSRF) vulnerability in admin.php…
• CVE-2007-5033Cross-site scripting (XSS) vulnerability in profile.php in p…
• CVE-2007-5034ELinks before 0.11.3, when sending a POST request for an htt…
• CVE-2007-5035PHP remote file inclusion vulnerability in html/modules/extr…
• CVE-2007-5037Buffer overflow in the inotifytools_snprintf function in src…
• CVE-2007-5038The offer_account_by_email function in User.pm in the WebSer…
• CVE-2007-5039Ghost Security Suite beta 1.110 does not properly validate c…
• CVE-2007-5040Ghost Security Suite alpha 1.200 does not properly validate …
• CVE-2007-5041G DATA InternetSecurity 2007 does not properly validate cert…
• CVE-2007-5042Outpost Firewall Pro 4.0.1025.7828 does not properly validat…