PT-2007-4670 · Liteweb · Liteweb

Published 2007-06-26 · Updated 2018-10-16 · CVE-2007-3398

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LiteWEB version 2.7

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging, by sending a large number of requests for pages that do not exist.

Recommendations For LiteWEB version 2.7, consider implementing rate limiting on requests to prevent excessive traffic, and ensure proper handling of requests for nonexistent pages to mitigate the risk of denial of service.

Exploit

Fix

Related Identifiers

CVE-2007-3398

Affected Products

Liteweb

References · 7

• 🔥 https://exploit-db.com/exploits/30233 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3398 · Security Note
• http://securityreason.com/securityalert/2835 · Note
• http://securityfocus.com/archive/1/472202/100/0/threaded · Note
• http://securityfocus.com/bid/24628 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35044 · Note
• http://osvdb.org/39010 · Note