TYPO3 Caching System Cache Table Flood Denial of Service Vulnerability

Bugtraq ID:	49622
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 14 2011 12:00AM
Updated:	Sep 14 2011 12:00AM
Credit:	Daniel Poetzinger
Vulnerable:	Typo3 Typo3 4.5.5 Typo3 Typo3 4.4.1 Typo3 Typo3 4.4 Typo3 Typo3 4.3.3 Typo3 Typo3 4.3.2 Typo3 Typo3 4.3.1 Typo3 Typo3 4.3 Typo3 Typo3 4.2.12 Typo3 Typo3 4.2.11 Typo3 Typo3 4.2.10 Typo3 Typo3 4.2.9 Typo3 Typo3 4.2.6 Typo3 Typo3 4.2.4 Typo3 Typo3 4.2.3 Typo3 Typo3 4.2.2 Typo3 Typo3 4.2.1 Typo3 Typo3 4.2 Typo3 Typo3 4.5.4 Typo3 Typo3 4.5.3 Typo3 Typo3 4.5 Typo3 Typo3 4.4.9 Typo3 Typo3 4.4.8 Typo3 Typo3 4.4.5 Typo3 Typo3 4.4.4 Typo3 Typo3 4.4.3 Typo3 Typo3 4.3beta2 Typo3 Typo3 4.3.9 Typo3 Typo3 4.3.7 Typo3 Typo3 4.3.6 Typo3 Typo3 4.3.4 Typo3 Typo3 4.3.12 Typo3 Typo3 4.3.11 Typo3 Typo3 4.3.0beta1 Typo3 Typo3 4.2.16 Typo3 Typo3 4.2.15 Typo3 Typo3 4.2.14 Typo3 Typo3 4.2.13
Not Vulnerable:	Typo3 Typo3 4.5.6 Typo3 Typo3 4.4.11 Typo3 Typo3 4.3.14

TYPO3 Caching System Cache Table Flood Denial of Service Vulnerability

TYPO3 is prone to a denial-of-service vulnerability that affects the Cache System sub-component.

An attacker can exploit this issue to prevent the application from caching new data, denying service to legitimate users.

The following versions of TYPO3 address this issue:

4.3.14
4.4.11
4.5.6

TYPO3 Caching System Cache Table Flood Denial of Service Vulnerability

An attacker can exploit this issue through a browser.

TYPO3 Caching System Cache Table Flood Denial of Service Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

TYPO3 Caching System Cache Table Flood Denial of Service Vulnerability

References:

• TYPO3 Homepage (TYPO3)
  
• TYPO3 Security Bulletin TYPO3-CORE-SA-2011-003: Improper error handling could le (TYPO3)