CVE:CVE-2011-2900
CNNVD:CNNVD-201108-092
Mongoose是MongoDB的一个对象模型工具，可以工作于异步环境下。
Mongoose 3.0及其他版本在处理HTTP PUT web请求时，“put_dir()”函数（mongoose.c）中的错误导致存在拒绝服务漏洞。远程攻击者可利用此漏洞导致断言错误或栈缓冲区溢出。
solution:Upgrade shttpd shttpd to a higher version than 1.42,and avoid the version 1.42; Upgrade valenok mongoose to a higher version than 3.0,and avoid the version 3.0; Upgrade yassl yasslews to a higher version than 0.2,and avoid the version 0.2