PT-2007-1993 · Atozed · Intraweb

Published 2007-01-26 · Updated 2018-10-16 · CVE-2007-0533

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AToZed IntraWeb component versions 8.0 and earlier AToZed IntraWeb component version 9.0 before build 9.0.12

Description The issue allows remote attackers to cause a denial of service, resulting in thread hang or CPU consumption, via a crafted HTTP request. This is related to the OnBeforeDispatch function in the TIWServerController object.

Recommendations For AToZed IntraWeb component versions 8.0 and earlier, update to a version later than 8.0. For AToZed IntraWeb component version 9.0, update to build 9.0.12 or later. As a temporary workaround, consider restricting access to the TIWServerController object until a patch is available.

Fix

Related Identifiers

CVE-2007-0533

Affected Products

Intraweb

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-0533 · Security Note
• http://securityfocus.com/archive/1/457947/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31685 · Note
• http://blogs.atozed.com/Olaf/20070124A.en.aspx · Note
• http://securityfocus.com/archive/1/458121/100/0/threaded · Note
• http://osvdb.org/32973 · Note
• http://securityfocus.com/bid/22185 · Note
• http://securityfocus.com/archive/1/457758/100/0/threaded · Note
• http://secunia.com/advisories/23902 · Note
• http://blogs.atozed.com/Olaf/20070124.en.aspx · Note
• http://vupen.com/english/advisories/2007/0355 · Note