PT-2007-4670 · Liteweb · Liteweb

Publicado 2007-06-26 · Atualizado 2018-10-16 · CVE-2007-3398

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LiteWEB version 2.7

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging, by sending a large number of requests for pages that do not exist.

Recommendations For LiteWEB version 2.7, consider implementing rate limiting on requests to prevent excessive traffic, and ensure proper handling of requests for nonexistent pages to mitigate the risk of denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2007-3398

Produtos afetados

Liteweb

Referências · 7

• 🔥 https://exploit-db.com/exploits/30233 · Exploit
• http://securityreason.com/securityalert/2835 · Nota
• http://securityfocus.com/archive/1/472202/100/0/threaded · Nota
• http://securityfocus.com/bid/24628 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3398 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35044 · Nota
• http://osvdb.org/39010 · Nota