CVE

Id
17651  
CVE No.
CVE-2006-1547  
Status
Candidate  
Description
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147645 17651 CVE-2006-1547 CONFIRM:http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html  View
147646 17651 CVE-2006-1547 CONFIRM:http://issues.apache.org/bugzilla/show_bug.cgi?id=38534  View
147647 17651 CVE-2006-1547 SUSE:SUSE-SR:2006:010  View
147648 17651 CVE-2006-1547 URL:http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html  View
147649 17651 CVE-2006-1547 BID:17342  View
147650 17651 CVE-2006-1547 URL:http://www.securityfocus.com/bid/17342  View
147651 17651 CVE-2006-1547 VUPEN:ADV-2006-1205  View
147652 17651 CVE-2006-1547 URL:http://www.vupen.com/english/advisories/2006/1205  View
147653 17651 CVE-2006-1547 SECTRACK:1015856  View
147654 17651 CVE-2006-1547 URL:http://securitytracker.com/id?1015856  View
147655 17651 CVE-2006-1547 SECUNIA:19493  View
147656 17651 CVE-2006-1547 URL:http://secunia.com/advisories/19493  View
147657 17651 CVE-2006-1547 SECUNIA:20117  View
147658 17651 CVE-2006-1547 URL:http://secunia.com/advisories/20117  View
147659 17651 CVE-2006-1547 XF:struts-actionform-dos(25613)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58716 JVNDB-2006-000982 PHP の recursive() 関数に関するサービス運用妨害 (DoS) の脆弱性 PHP には、recursive() 関数の処理に不備があるために、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2006-1549 17651 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000982.html  View