DotNetNuke Syndication Handler Remote Denial Of Service Vulnerability

Bugtraq ID:	42550
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 17 2010 12:00AM
Updated:	Aug 17 2010 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	DotNetNuke DotNetNuke 5.4.3 DotNetNuke DotNetNuke 5.4.2 DotNetNuke DotNetNuke 5.4.1 DotNetNuke DotNetNuke 5.4 DotNetNuke DotNetNuke 5.3.1 DotNetNuke DotNetNuke 5.3 DotNetNuke DotNetNuke 5.2.3 DotNetNuke DotNetNuke 5.2 DotNetNuke DotNetNuke 5.1.4 DotNetNuke DotNetNuke 5.1.3 DotNetNuke DotNetNuke 5.1.2 DotNetNuke DotNetNuke 5.1.1 DotNetNuke DotNetNuke 5.1 DotNetNuke DotNetNuke 5.0.1 DotNetNuke DotNetNuke 5.0
Not Vulnerable:	DotNetNuke DotNetNuke 5.5

DotNetNuke Syndication Handler Remote Denial Of Service Vulnerability

DotNetNuke is affected by a remote denial-of-service vulnerability because the application fails to properly handle certain requests.

Successful exploits will cause the application to consume all resources resulting in denial-of-service conditions.

DotNetNuke versions prior to 5.5.0 are affected.

DotNetNuke Syndication Handler Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

DotNetNuke Syndication Handler Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

DotNetNuke Syndication Handler Remote Denial Of Service Vulnerability

References:

• DotNetNuke Homepage (DotNetNuke)
  
• Potential resource exhaustion (DotNetNuke)