CVEvulnerability
CVE-2009-3277
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a "ReDoS" vulnerability.
Affected configurations
• xenu by datavault
References
- http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf Exploit
- http://www.securityfocus.com/archive/1/506419/100/0/threaded www.securityfocus.com
- http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf Exploit
- http://www.securityfocus.com/archive/1/506419/100/0/threaded www.securityfocus.com