NVD

Id
39665  
Name
CVE-2013-3969  
Description
The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-01  
Modified Date
2013-10-02  
Seq
2013-3969  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201855 39665 CVE-2013-3969 http://blog.scrt.ch/2013/06/04/mongodb-rce-by-databasespraying/  View
201856 39665 CVE-2013-3969 http://www.mongodb.org/about/alerts/  View
201857 39665 CVE-2013-3969 [oss-security] 20130730 Re: CVE Request - MongoDB <=2.4.4 uninitialized object  View
201858 39665 CVE-2013-3969 https://jira.mongodb.org/browse/SERVER-9878  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22889 JVNDB-2013-004464 MongoDB の scripting/engine_v8.h の find プロトタイプにおけるサービス運用妨害 (DoS) の脆弱性 MongoDB の scripting/engine_v8.h の find プロトタイプには、サービス運用妨害 (未初期化ポインタデリファレンスおよびサーバクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-3969 63911 CVE-2013-3969 39665 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004464.html 2013-06-08 2013-10-04 View