1. CVE-Search
  2. CVE-2012-5704
ID CVE-2012-5704
Summary The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.
References
Vulnerable Configurations
  • cpe:2.3:a:justin_dodge:hotblocks:6.x-1.5:*:*:*:*:*:*:*
    cpe:2.3:a:justin_dodge:hotblocks:6.x-1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:justin_dodge:hotblocks:6.x-1.6:*:*:*:*:*:*:*
    cpe:2.3:a:justin_dodge:hotblocks:6.x-1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:justin_dodge:hotblocks:6.x-1.7:*:*:*:*:*:*:*
    cpe:2.3:a:justin_dodge:hotblocks:6.x-1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:justin_dodge:hotblocks:6.x-1.x:dev:*:*:*:*:*:*
    cpe:2.3:a:justin_dodge:hotblocks:6.x-1.x:dev:*:*:*:*:*:*
  • cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*
CVSS
Base: 3.5 (as of 01-11-2012 - 10:44)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:S/C:N/I:N/A:P
refmap via4
confirm http://drupal.org/node/1732828
misc
mlist
  • [oss-security] 20121004 CVE Request for Drupal Contributed Modules
  • [oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules
Last major update 01-11-2012 - 10:44
Published 01-11-2012 - 10:44
Last modified 01-11-2012 - 10:44
Back to Top