TBDEV.net Comment Field Denial of Service Vulnerability

Bugtraq ID:	29702
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 13 2008 12:00AM
Updated:	Jun 16 2008 08:41PM
Credit:	skouliki kretinos <[email protected]>
Vulnerable:	TBDev.NET TBDEV-01-01-08 0
Not Vulnerable:

TBDEV.net Comment Field Denial of Service Vulnerability

TBDEV.net is prone to a vulnerability that can cause denial-of-service conditions. The issue occurs because the application fails to handle specially crafted comments posted to torrent description pages.

A successful attack will delete the torrent description as well as any other comments made on the page.

NOTE: An attacker may be required to log in to the application before posting comments.

TBDEV-01-01-08 is vulnerable; other versions may also be affected.

TBDEV.net Comment Field Denial of Service Vulnerability

Attackers can exploit this issue via a browser.

TBDEV.net Comment Field Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TBDEV.net Comment Field Denial of Service Vulnerability

References:

• Project Page (TBDev.NET)
  
• Vendor Homepage (TBDev.NET)