PT-2009-4625 · Carom3D · Carom3D

Gjoko Krstic + 1 · Published 2009-06-23 · Updated 2017-09-29 · CVE-2009-2173

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Carom3D version 5.06

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application hang, by sending a crafted HTTP request to TCP port 28012.

Recommendations For Carom3D version 5.06, consider restricting access to TCP port 28012 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-2173

Affected Products

Carom3D

References · 3

• 🔥 https://exploit-db.com/exploits/8971 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2173 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51219 · Note