Lucene search
HistoryNov 12, 2010 - 10:00 p.m.
CVE-2010-3899
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
High
EPSS
0.011
Percentile
84.2%
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of documents.
Affected configurations
Node
ibmomnifindMatch8.0-enterprise
ORibmomnifindMatch9.0-enterprise
Related
exploitpack
exploitpack
IBM OmniFind Crawler - Denial of Service
2010-11-09 00:00:00
seebug
seebug
IBM OmniFind Crawler Denial of Service Vulnerability
2014-07-01 00:00:00
cvelist
cvelist
CVE-2010-3899
2010-11-12 21:00:00
zdt
zdt
IBM OmniFind Crawler Denial of Service Vulnerability
2010-11-10 00:00:00
cve
cve
CVE-2010-3899
2010-11-12 22:00:02
prion
prion
Design/Logic Flaw
2010-11-12 22:00:00
exploitdb
exploitdb
IBM OmniFind Crawler - Denial of Service
2010-11-09 00:00:00
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
High
EPSS
0.011
Percentile
84.2%
Related for NVD:CVE-2010-3899