PT-2008-6721 · Textpattern · Textpattern

Alexandr Polyakov + 1 · Publicado 2008-12-18 · Atualizado 2018-10-11 · CVE-2008-5669

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Textpattern (aka Txp CMS) version 4.0.5

Description The issue allows remote attackers to cause a denial of service. This is achieved by sending a long message parameter to the comments preview section in index.php.

Recommendations For Textpattern (aka Txp CMS) version 4.0.5, consider restricting the length of the message parameter in the comments preview section to prevent denial of service attacks.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5669

Produtos afetados

Textpattern

Referências · 7

• 🔥 http://securityfocus.com/bid/27606 · Exploit
• http://securityreason.com/securityalert/4786 · Nota
• http://securityfocus.com/archive/1/487483/100/200/threaded · Nota
• http://textpattern.com/weblog/310/textpattern-406-released · Aviso do Fabricante
• http://secunia.com/advisories/28793 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5669 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5669 · Nota de Segurança