CVE-2008-5421: Netwin Smsgate

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.

Affected products

• Netwin Smsgate: up to and including 1.1n; version 1.0a only; version 1.0c only; version 1.0h only; version 1.0r only; version 1.0w only; …

Published 2008-12-11. Last modified 2026-06-16.