security.fatihkilic.de
http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt CVE-2010-3899
IBM OmniFind Crawler - Denial of Service
Record summary
CVE-2010-3899 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of documents.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM OmniFind Crawler - Denial of ServiceExploitDB exploitby Fatih KilicNot analyzed1 file
References
715476exploit
http://www.exploit-db.com/exploits/15476 69078vdb entry
http://www.osvdb.org/69078 20101109 IBM OmniFind - several vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/514688/100/0/threaded 44740vdb entry
http://www.securityfocus.com/bid/44740 ADV-2010-2933vdb entry
http://www.vupen.com/english/advisories/2010/2933 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-3899