CVE-2010-1677

Mhonarc - Resource Management Error

Title source: rule
STIX 2.1

Description

MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524.

Exploits (1)

exploitdb WRITEUP VERIFIED
by anonymous · textdoslinux
https://www.exploit-db.com/exploits/35478

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64656
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3344
Mailing List mailing-list x_refsource_mlist
http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01297.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0067
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42694
Various Sources x_refsource_confirm
http://savannah.nongnu.org/bugs/?32014
Various Sources vendor-advisory x_refsource_mandriva
http://lists.mandriva.com/security-announce/2011-01/msg00004.php

Scores

EPSS 0.1114
EPSS Percentile 93.6%

Details

CWE
CWE-399
Status published
Products (1)
mhonarc/mhonarc 2.6.16
Published Jan 03, 2011
Tracked Since Feb 18, 2026