« Volver al listado

CVE-2007-5984

Estado: ModificadaAlta (7.8)—

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Justin Hagstrom — Autoindex PHP Script

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5984",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-11-15T00:46:00.000",
  "references": [
    {
      "url": "http://autoindex.sourceforge.net/change_log.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/45282",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3360",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483592/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26410",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38437",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://autoindex.sourceforge.net/change_log.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/45282",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3360",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483592/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26410",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38437",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous \"recursive calculation.\""
    },
    {
      "lang": "es",
      "value": "classes/Url.php en Justin Hagstrom AutoIndex PHP Script anterior a 2.2.4 permite a atacantes remotos provocar denegación de servicio (consumo de memoria y CPU) a través de la secuencia %00 en el parámetro dir en index.php, el cual dispara un error de \"calculo recursivo\"."
    }
  ],
  "lastModified": "2026-06-16T22:47:12.267",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB42738B-CEDA-4213-B2AF-B6DB8111D267"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54ED1B41-D489-4032-A5CA-5BED35142FA4"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18591238-4182-445B-94FE-EBC0F8E84C42"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A0FC62A-E6C7-40DA-A38D-6F1238AFC846"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65EBBC91-40F4-4427-A43D-093378B15AA3"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49A6995D-C234-4055-A8C7-93AC4BFC77F8"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B460718-4B1F-4891-BD2F-F6C210C6EDA8"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F196FF6-2C60-4032-93F0-706083ED25DF"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3C68C83-C6AE-46C4-8B6D-B6DA9E328258"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0ADA0E4E-82AC-41EE-A820-1D8062E14A44"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "511D894D-E460-4E62-8DE6-E6EFF58CA716"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4D27BEF-F240-4260-8705-181072AD9D50"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1E1AB0E-4B7D-4085-97FA-6F4BA9FAB280"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CEB6923-E3FF-4831-9D50-516B5EDF6D66"
            },
            {
              "criteria": "cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED4FB1C5-08E4-46AA-9ADD-5F99C967EEF0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}