Lucene search

[email protected]CVE-2007-2197

HistoryApr 24, 2007 - 5:19 p.m.

CVE-2007-2197

2007-04-2417:19:00

[email protected]

web.nvd.nist.gov

neatupload

asp.net

component

cve-2007-2197

race condition

security vulnerability

http response

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients’ HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for the same HttpWorkerRequest object and causes a buffer to be reused for a different request.

Affected configurations

NVD

Node

brettle_developmentneatuploadMatch1.1.18

brettle_developmentneatuploadMatch1.1.19

brettle_developmentneatuploadMatch1.1.20

brettle_developmentneatuploadMatch1.1.21

brettle_developmentneatuploadMatch1.1.22

brettle_developmentneatuploadMatch1.1.23

brettle_developmentneatuploadMatch1.2.11

brettle_developmentneatuploadMatch1.2.12

brettle_developmentneatuploadMatch1.2.13

brettle_developmentneatuploadMatch1.2.14

brettle_developmentneatuploadMatch1.2.15

brettle_developmentneatuploadMatch1.2.16

brettle_developmentneatuploadMatchtrunk.379

brettle_developmentneatuploadMatchtrunk.380

brettle_developmentneatuploadMatchtrunk.381

CPENameOperatorVersion
brettle_development:neatuploadbrettle development neatuploadeq1.1.18
brettle_development:neatuploadbrettle development neatuploadeq1.1.19
brettle_development:neatuploadbrettle development neatuploadeq1.1.20
brettle_development:neatuploadbrettle development neatuploadeq1.1.21
brettle_development:neatuploadbrettle development neatuploadeq1.1.22
brettle_development:neatuploadbrettle development neatuploadeq1.1.23
brettle_development:neatuploadbrettle development neatuploadeq1.2.11
brettle_development:neatuploadbrettle development neatuploadeq1.2.12
brettle_development:neatuploadbrettle development neatuploadeq1.2.13
brettle_development:neatuploadbrettle development neatuploadeq1.2.14

CPE	Name	Operator	Version
brettle_development:neatupload	brettle development neatupload	eq	1.1.18
brettle_development:neatupload	brettle development neatupload	eq	1.1.19
brettle_development:neatupload	brettle development neatupload	eq	1.1.20
brettle_development:neatupload	brettle development neatupload	eq	1.1.21
brettle_development:neatupload	brettle development neatupload	eq	1.1.22
brettle_development:neatupload	brettle development neatupload	eq	1.1.23
brettle_development:neatupload	brettle development neatupload	eq	1.2.11
brettle_development:neatupload	brettle development neatupload	eq	1.2.12
brettle_development:neatupload	brettle development neatupload	eq	1.2.13
brettle_development:neatupload	brettle development neatupload	eq	1.2.14

Rows per page:

1-10 of 151

References

secunia.com/advisories/25003

www.securityfocus.com/archive/1/466404/100/0/threaded

www.securityfocus.com/bid/23578

exchange.xforce.ibmcloud.com/vulnerabilities/33785

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Related for CVE-2007-2197

nvd1 prion1 cvelist1