CVE-2007-5984
Published Nov 15, 2007
Last updated 6 years ago
Overview
- Description
- classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB42738B-CEDA-4213-B2AF-B6DB8111D267"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54ED1B41-D489-4032-A5CA-5BED35142FA4"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18591238-4182-445B-94FE-EBC0F8E84C42"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A0FC62A-E6C7-40DA-A38D-6F1238AFC846"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65EBBC91-40F4-4427-A43D-093378B15AA3"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49A6995D-C234-4055-A8C7-93AC4BFC77F8"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B460718-4B1F-4891-BD2F-F6C210C6EDA8"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F196FF6-2C60-4032-93F0-706083ED25DF"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3C68C83-C6AE-46C4-8B6D-B6DA9E328258"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ADA0E4E-82AC-41EE-A820-1D8062E14A44"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "511D894D-E460-4E62-8DE6-E6EFF58CA716"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4D27BEF-F240-4260-8705-181072AD9D50"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1E1AB0E-4B7D-4085-97FA-6F4BA9FAB280"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CEB6923-E3FF-4831-9D50-516B5EDF6D66"
},
{
"criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED4FB1C5-08E4-46AA-9ADD-5F99C967EEF0"
}
],
"operator": "OR"
}
]
}
]