VulDBCVE-2010-10001CVE-2010-10001
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
34.7%
A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| shemes | grabit | * | cpe:2.3:a:shemes:grabit:*:*:*:*:*:*:*:* |
| shemes | grabit | 1.7.2 | cpe:2.3:a:shemes:grabit:1.7.2:beta:*:*:*:*:*:* |
| shemes | grabit | 1.7.2 | cpe:2.3:a:shemes:grabit:1.7.2:beta2:*:*:*:*:*:* |
| shemes | grabit | 1.7.2 | cpe:2.3:a:shemes:grabit:1.7.2:beta3:*:*:*:*:*:* |
| shemes | grabit | 1.7.2 | cpe:2.3:a:shemes:grabit:1.7.2:beta4:*:*:*:*:*:* |
CNA Affected
[
{
"product": "GrabIt",
"vendor": "Shemes",
"versions": [
{
"status": "affected",
"version": "1.7.2 Beta 4"
}
]
}
]Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
34.7%