Vulnerabilities > CVE-2012-5704 - Resource Management Errors vulnerability in Justin Dodge Hotblocks
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 | |
| Application | 1 |
Common Weakness Enumeration (CWE)
References
- http://drupal.org/node/1732828
- http://drupal.org/node/1732828
- http://drupal.org/node/1732946
- http://drupal.org/node/1732946
- http://www.madirish.net/543
- http://www.madirish.net/543
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1
- http://www.openwall.com/lists/oss-security/2012/10/07/1