PT-2007-1993 · Atozed · Intraweb

Publicado 2007-01-26 · Atualizado 2018-10-16 · CVE-2007-0533

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AToZed IntraWeb component versions 8.0 and earlier AToZed IntraWeb component version 9.0 before build 9.0.12

Description The issue allows remote attackers to cause a denial of service, resulting in thread hang or CPU consumption, via a crafted HTTP request. This is related to the OnBeforeDispatch function in the TIWServerController object.

Recommendations For AToZed IntraWeb component versions 8.0 and earlier, update to a version later than 8.0. For AToZed IntraWeb component version 9.0, update to build 9.0.12 or later. As a temporary workaround, consider restricting access to the TIWServerController object until a patch is available.

Correção

Identificadores relacionados

CVE-2007-0533

Produtos afetados

Intraweb

Referências · 11

• http://securityfocus.com/archive/1/457947/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31685 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0533 · Nota de Segurança
• http://blogs.atozed.com/Olaf/20070124A.en.aspx · Nota
• http://securityfocus.com/archive/1/458121/100/0/threaded · Nota
• http://osvdb.org/32973 · Nota
• http://securityfocus.com/bid/22185 · Nota
• http://securityfocus.com/archive/1/457758/100/0/threaded · Nota
• http://secunia.com/advisories/23902 · Nota
• http://blogs.atozed.com/Olaf/20070124.en.aspx · Nota
• http://vupen.com/english/advisories/2007/0355 · Nota