CVE-2007-0185

2007-01-1205:04:00

[email protected]

web.nvd.nist.gov

getahead direct web remoting

dwr

denial of service

memory exhaustion

servlet outage

cve-2007-0185

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

Affected configurations

NVD

Node

getaheaddirect_web_remotingRange≤1.1.3

getaheaddirect_web_remotingMatch0.7

getaheaddirect_web_remotingMatch0.8

getaheaddirect_web_remotingMatch0.9

getaheaddirect_web_remotingMatch1.0

getaheaddirect_web_remotingMatch1.1.0

getaheaddirect_web_remotingMatch1.1.1

getaheaddirect_web_remotingMatch1.1.2

CPENameOperatorVersion
getahead:direct_web_remotinggetahead direct web remotingle1.1.3
getahead:direct_web_remotinggetahead direct web remotingeq0.7
getahead:direct_web_remotinggetahead direct web remotingeq0.8
getahead:direct_web_remotinggetahead direct web remotingeq0.9
getahead:direct_web_remotinggetahead direct web remotingeq1.0
getahead:direct_web_remotinggetahead direct web remotingeq1.1.0
getahead:direct_web_remotinggetahead direct web remotingeq1.1.1
getahead:direct_web_remotinggetahead direct web remotingeq1.1.2

CPE	Name	Operator	Version
getahead:direct_web_remoting	getahead direct web remoting	le	1.1.3
getahead:direct_web_remoting	getahead direct web remoting	eq	0.7
getahead:direct_web_remoting	getahead direct web remoting	eq	0.8
getahead:direct_web_remoting	getahead direct web remoting	eq	0.9
getahead:direct_web_remoting	getahead direct web remoting	eq	1.0
getahead:direct_web_remoting	getahead direct web remoting	eq	1.1.0
getahead:direct_web_remoting	getahead direct web remoting	eq	1.1.1
getahead:direct_web_remoting	getahead direct web remoting	eq	1.1.2