CVE-2008-2391 SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeplex subsonic | All versions | No fix listed |
References
- 3898 third-party-advisory
- www.codeplex.com
- www.portcullis-security.com
- 20080519 DoS attacks using SQL Wildcards - White Paper mailing-list
- subsonic-pagesize-dos(42562) vdb-entry