| CVE-2006-1090 |
|
发布时间 :2006-03-09 08:06:00 | ||
| 修订时间 :2011-03-07 21:32:00 | ||||
| NMC |
[原文]register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations.
[CNNVD]PunBB 'register.php'大量用户注册漏洞(CNNVD-200603-158)
PunBB 1.2.10中的register.php可以让远程攻击者通过洪水式新用户注册，制造拒绝服务。
- CVSS (基础分值)
| CVSS分值: | 7.8 | [严重(HIGH)] |
| 机密性影响: | NONE | [对系统的机密性无影响] |
| 完整性影响: | NONE | [不会对系统完整性产生影响] |
| 可用性影响: | COMPLETE | [可能导致系统完全宕机] |
| 攻击复杂度: | LOW | [漏洞利用没有访问限制 ] |
| 攻击向量: | [--] | |
| 身份认证: | NONE | [漏洞利用无需身份认证] |
- CPE (受影响的平台与产品)
| 产品及版本信息(CPE)暂不可用 |
- OVAL (用于检测的技术细节)
| 未找到相关OVAL定义 |
- 官方数据库链接
- 其它链接及资源
|
http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch (PATCH) CONFIRM http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch |
|
http://www.vupen.com/english/advisories/2006/0773 (UNKNOWN) VUPEN ADV-2006-0773 |
|
http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt (UNKNOWN) CONFIRM http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt |
|
http://xforce.iss.net/xforce/xfdb/24837 (UNKNOWN) XF punbb-register-ip-dos(24837) |
- 漏洞信息
| PunBB 'register.php'大量用户注册漏洞 | |
| 高危 | 未知 |
| 2006-03-09 00:00:00 | 2006-03-09 00:00:00 |
| 远程 | |
| PunBB 1.2.10中的register.php可以让远程攻击者通过洪水式新用户注册，制造拒绝服务。 | |
We must accept finite disappointment, but we must never lose infinite hope.