PT-2008-3244 · Autonomy · Worksite Web

CVE-2008-1700 · Publicado 2008-04-08 · Atualizado 2024-02-02

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions WorkSite Web versions 8.2 before SP1 P2

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large number of SendNrlLink directives. This results in opening a separate window for each directive.

Recommendations For WorkSite Web versions 8.2 before SP1 P2, apply the SP1 P2 patch to resolve the issue. As a temporary workaround, consider restricting the number of SendNrlLink directives to minimize the risk of exploitation.

Exploit

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2008-1700

Produtos afetados

Worksite Web

Referências · 4

• 🔥 http://mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1700 · Nota de Segurança
• https://t.me/cvenotify/69695 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41757 · Nota