CVE

Id
20376  
CVE No.
CVE-2006-4272  
Status
Candidate  
Description
** DISPUTED ** Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) via a large number of requests to register.php. NOTE: the vendor has disputed this vulnerability, stating "If you have the CAPTCHA enabled then the registrations wont even go through. ... if you are talking about the flood being allowed in the first place then surely this is something that should be handled at the server level."  
Phase
Assigned (20060821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
189530 20376 CVE-2006-4272 BUGTRAQ:20060815 UPDATE vBulletin Version 3.5.4 exploit  View
189531 20376 CVE-2006-4272 URL:http://www.securityfocus.com/archive/1/archive/1/443648/100/0/threaded  View
189532 20376 CVE-2006-4272 BUGTRAQ:20060818 Re: UPDATE vBulletin Version 3.5.4 exploit  View
189533 20376 CVE-2006-4272 URL:http://archives.neohapsis.com/archives/bugtraq/2006-08/0381.html  View
189534 20376 CVE-2006-4272 SREASON:1426  View

Related JVN