CVEvulnerability
CVE-2007-3871
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.
Affected configurations
• deutsche post stampit web 1.0
References
- http://seclists.org/fulldisclosure/2007/Aug/0441.html seclists.org
- http://securityreason.com/securityalert/3129 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36365 exchange.xforce.ibmcloud.com
- https://www.cynops.de/advisories/CVE-2007-3871-signed.txt www.cynops.de
- https://www.cynops.de/advisories/CVE-2007-3871.txt www.cynops.de
- https://www.klink.name/security/aklink-sa-2007-003-stampit-web-dos.txt www.klink.name
- http://seclists.org/fulldisclosure/2007/Aug/0441.html seclists.org
- http://securityreason.com/securityalert/3129 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36365 exchange.xforce.ibmcloud.com
- https://www.cynops.de/advisories/CVE-2007-3871-signed.txt www.cynops.de
- https://www.cynops.de/advisories/CVE-2007-3871.txt www.cynops.de
- https://www.klink.name/security/aklink-sa-2007-003-stampit-web-dos.txt www.klink.name