Lucene search

K
cveMitreCVE-2008-1700
HistoryApr 08, 2008 - 6:05 p.m.

CVE-2008-1700

2008-04-0818:05:00
CWE-770
mitre
web.nvd.nist.gov
22
cve-2008-1700
web transferctrl
worksite web
denial of service
memory consumption
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

69.7%

The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.

Affected configurations

Nvd
Node
interwovenworksite_webRange8.2
VendorProductVersionCPE
interwovenworksite_web*cpe:2.3:a:interwoven:worksite_web:*:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

69.7%

Related for CVE-2008-1700