CVE-2007-0138 formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple reques...
MediumCVSS 5.0
EPSS 2.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fersch formbankserver | = 1.9 | No fix listed |
References
- 32546 vdb-entry
- 23539 third-party-advisory vendor-advisory
- formbankserver-formbank-dos(31216) vdb-entry