5

CVE-2008-1532

Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Perlbal ≫ Perlbal Version <= 1.60
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.08% 0.791
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://bugs.gentoo.org/show_bug.cgi?id=214784
http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES
http://secunia.com/advisories/29565
http://secunia.com/advisories/29619
http://www.securityfocus.com/bid/28491
http://www.vupen.com/english/advisories/2008/1045/references
https://bugzilla.redhat.com/show_bug.cgi?id=439054
https://exchange.xforce.ibmcloud.com/vulnerabilities/41538
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00665.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00672.html