CVE

Id
32508  
CVE No.
CVE-2008-2391  
Status
Candidate  
Description
SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351978 32508 CVE-2008-2391 BUGTRAQ:20080519 DoS attacks using SQL Wildcards - White Paper  View
351979 32508 CVE-2008-2391 URL:http://www.securityfocus.com/archive/1/archive/1/492233/100/0/threaded  View
351980 32508 CVE-2008-2391 MISC:http://www.codeplex.com/subsonic/WorkItem/View.aspx?WorkItemId=16112  View
351981 32508 CVE-2008-2391 MISC:http://www.portcullis-security.com/uplds/wildcard_attacks.pdf  View
351982 32508 CVE-2008-2391 SREASON:3898  View
351983 32508 CVE-2008-2391 URL:http://securityreason.com/securityalert/3898  View
351984 32508 CVE-2008-2391 XF:subsonic-pagesize-dos(42562)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47778 JVNDB-2008-003088 AlkalinePHP の thread.php における SQL インジェクションの脆弱性 AlkalinePHP の thread.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2395 32508 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003088.html  View