OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Oneworldstore | Oneworldstore | basic (including) | basic (including) |
| Oneworldstore | Oneworldstore | business (including) | business (including) |
| Oneworldstore | Oneworldstore | enterprise (including) | enterprise (including) |
| Oneworldstore | Oneworldstore | free (including) | free (including) |
| Oneworldstore | Oneworldstore | soho (including) | soho (including) |
References
- http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html
- http://secunia.com/advisories/15057
- http://securitytracker.com/id?1013782
- http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon
- http://www.osvdb.org/15724
- http://www.securityfocus.com/bid/13322
- http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html
- http://secunia.com/advisories/15057
- http://securitytracker.com/id?1013782
- http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon
- http://www.osvdb.org/15724
- http://www.securityfocus.com/bid/13322