CVE-2006-1547

Description

ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25613

http://www.vupen.com/english/advisories/2006/1205

http://www.securityfocus.com/bid/17342

http://securitytracker.com/id?1015856

http://secunia.com/advisories/20117

http://secunia.com/advisories/19493

http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html

http://issues.apache.org/bugzilla/show_bug.cgi?id=38534

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3