PT-2000-1367 · Unknown · Ultraboard

Published 2000-05-05 · Updated 2008-09-10 · CVE-2000-0426

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions UltraBoard versions 1.6 and other versions

Description The issue allows remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself.

Recommendations For UltraBoard version 1.6 and other affected versions, avoid using the Session parameter to reference UltraBoard until a fix is available. As a temporary workaround, consider restricting access to the Session parameter to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0426

Affected Products

Ultraboard

References · 4

• 🔥 https://exploit-db.com/exploits/19899 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0426 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0059.html · Note
• http://securityfocus.com/bid/1175 · Note