CVE-2007-3871 Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that ha...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deutsche post stampit web | = 1.0 | No fix listed |
References
- 20070827 Stampit Web - DoS (CVE-2007-3871) mailing-list
- 3129 third-party-advisory
- stampit-soap-dos(36365) vdb-entry
- www.cynops.de
- www.cynops.de
- www.klink.name