CVE-2006-0911
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch WhatsUp Professional 2006 - Remote Denial of Service2006-02-22 · dos · asp · Verified
Impact
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) "In]" and (2) "b;tnLogIn" parameters, or (3) malformed btnLogIn parameters, possibly involving missing "[" (open bracket) or "[" (closing bracket) characters, as demonstrated by "&btnLogIn=[Log&In]=&" or "&b;tnLogIn=[Log&In]=&" in the URL. NOTE: due to the lack of diagnosis by the original researcher, the precise nature of the vulnerability is unclear.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Whatsup | Version professional_2006 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/472
- http://www.osvdb.org/23494
- http://www.securityfocus.com/archive/1/425780/100/0/threaded
- http://www.securityfocus.com/bid/16771
- http://www.vupen.com/english/advisories/2006/0704
- http://zur.homelinux.com/Advisories/ipswitch_dos.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24864
- http://securityreason.com/securityalert/472
- http://www.osvdb.org/23494
- http://www.securityfocus.com/archive/1/425780/100/0/threaded
- http://www.securityfocus.com/bid/16771
- http://www.vupen.com/english/advisories/2006/0704
- http://zur.homelinux.com/Advisories/ipswitch_dos.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24864