Unscored CVE-2007-3871 EUVD-2007-3855GHSA-4x48-mfm4-j87r

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalida…

Published Sep 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.

References

https://www.cynops.de/advisories/CVE-2007-3871.txt
stampit-soap-dos(36365) vdb-entry
https://www.klink.name/security/aklink-sa-2007-003-stampit-web-dos.txt
https://www.cynops.de/advisories/CVE-2007-3871-signed.txt
3129 third-party-advisory
20070827 Stampit Web - DoS (CVE-2007-3871) mailing-list