Lucene search
MitreCVE-2006-6916HistoryJan 11, 2007 - 2:00 a.m.
CVE-2006-6916
2007-01-1102:00:00
mitre
web.nvd.nist.gov
29
cve-2006-6916
getahead direct web remoting
dwr
denial of service
infinite loop
crafted input
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
60.1%
Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to “crafted input.”
Affected configurations
Node
getaheaddirect_web_remotingRange≤1.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| getahead | direct_web_remoting | * | cpe:2.3:a:getahead:direct_web_remoting:*:*:*:*:*:*:*:* |
References
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
60.1%
Related for CVE-2006-6916