PT-2008-3244 · Autonomy · Worksite Web

Published 2008-04-08 · Updated 2024-02-02 · CVE-2008-1700

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions WorkSite Web versions 8.2 before SP1 P2

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large number of SendNrlLink directives. This results in opening a separate window for each directive.

Recommendations For WorkSite Web versions 8.2 before SP1 P2, apply the SP1 P2 patch to resolve the issue. As a temporary workaround, consider restricting the number of SendNrlLink directives to minimize the risk of exploitation.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2008-1700

Affected Products

Worksite Web

References · 4

• 🔥 http://mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1700 · Security Note
• https://t.me/cvenotify/69695 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41757 · Note