UseBB BBcode Parsing Remote Denial Of Service Vulnerability
BID:37010
Info
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
| Bugtraq ID: | 37010 |
| Class: | Design Error |
| CVE: |
CVE-2009-4041 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 12 2009 12:00AM |
| Updated: | Jul 22 2010 06:36PM |
| Credit: | This issue was disclosed by the vendor. |
| Vulnerable: |
UseBB UseBB 1.0.9 UseBB UseBB 1.0.7 UseBB UseBB 0.7 UseBB UseBB 0.6 a UseBB UseBB 0.6 UseBB UseBB 0.5.1 a UseBB UseBB 0.5.1 |
| Not Vulnerable: |
UseBB UseBB 1.0.10 |
Discussion
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
UseBB is prone to a remote denial-of-service vulnerability.
Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop and consume excessive resources, denying service to legitimate users.
Versions prior to UseBB 1.0.10 are vulnerable.
UseBB is prone to a remote denial-of-service vulnerability.
Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop and consume excessive resources, denying service to legitimate users.
Versions prior to UseBB 1.0.10 are vulnerable.
Exploit / POC
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
References:
References:
- UseBB 1.0.11 released (UseBB)
- UseBB Homepage (UseBB)