CVE-2007-0138

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-01-09

Last modified

2024-08-07

Affected products

• Formbankserver (Fersch)

References

• http://osvdb.org/32546
• http://secunia.com/advisories/23539
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31216