NVD

Id
6669  
Name
CVE-2008-6938  
Description
Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service (crash or hang) and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an executable DLL, which triggers the crash when the DLL load fails, as demonstrated using Isapiusers.txt.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2009-08-11  
Modified Date
2009-08-18  
Seq
2008-6938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38296 6669 CVE-2008-6938 20081122 Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38297 6669 CVE-2008-6938 7109  View
38298 6669 CVE-2008-6938 20081122 Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38299 6669 CVE-2008-6938 20081124 Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38300 6669 CVE-2008-6938 20081130 Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38301 6669 CVE-2008-6938 20081201 Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38302 6669 CVE-2008-6938 20081203 Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability  View
38303 6669 CVE-2008-6938 32287  View
38304 6669 CVE-2008-6938 pi3web-isapi-dos(46600)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43316 JVNDB-2009-004323 Pi3Web におけるサービス運用妨害 (DoS) の脆弱性 Pi3Web には、Pi3Web/Conf/Intenet.pi3 を使用しないで Windows 上にデスクトップアプリケーションとしてインストールされている際、サービス運用妨害 (クラッシュまたはハング) 状態となる、およびサーバのフルパス名を取得される脆弱性が存在します。 CVE-2008-6938 37051 CVE-2008-6938 6669 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004323.html 2009-08-11 2012-09-25 View