CVE-2008-1700 The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLin...
HighCVSS 7.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interwoven worksite web | <= 8.2 | No fix listed |
References
- www.mwrinfosecurity.com broken-link exploit
- worksiteweb-webtransferctrl-imanfile-dos(41757) third-party-advisory vdb-entry