Vulnerabilities > CVE-2007-0538 - Unspecified vulnerability in Telligent Systems Community Server Forums
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to (1) a large file, which triggers a long download session without a timeout constraint; or (2) a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
References
- http://osvdb.org/33583
- http://osvdb.org/33583
- http://osvdb.org/33584
- http://osvdb.org/33584
- http://securityreason.com/securityalert/2211
- http://securityreason.com/securityalert/2211
- http://www.securityfocus.com/archive/1/457996/100/0/threaded
- http://www.securityfocus.com/archive/1/457996/100/0/threaded
- http://www.securityfocus.com/archive/1/457999/100/0/threaded
- http://www.securityfocus.com/archive/1/457999/100/0/threaded