Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2008-0199: PRO-Search can be crashed by remote request
CVE-2008-0199 · published 18 years ago
Summary
PRO-Search version 0.17 and earlier can be made to stop working when an attacker sends specially crafted values in the show_page or time fields of a web request. This results in a denial of service, meaning the service becomes unavailable to legitimate users. Upgrade to the latest version of PRO-Search to protect against this condition.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| pro_search | pro_search |
<= 0.16 cpe:2.3:a:pro_search:pro_search:*:*:*:*:*:*:*:* |
Original advisory text
PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.
PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html Exploit
- http://securityreason.com/securityalert/3539
- http://securityvulns.ru/Sdocument731.html
- http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797
- http://websecurity.com.ua/1259/
- http://www.securityfocus.com/archive/1/485786/100/0/threaded
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.0
Medium
Type
CWE-20Improper Input Validation
Timeline
Published10 Jan 2008
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-0199 · NVD
Track software like this
Free during beta