PT-2009-4625 · Carom3D · Carom3D

Gjoko Krstic + 1 · Publicado 2009-06-23 · Atualizado 2017-09-29 · CVE-2009-2173

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Carom3D version 5.06

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application hang, by sending a crafted HTTP request to TCP port 28012.

Recommendations For Carom3D version 5.06, consider restricting access to TCP port 28012 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-2173

Produtos afetados

Carom3D

Referências · 3

• 🔥 https://exploit-db.com/exploits/8971 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2173 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51219 · Nota