CVE-2006-5098

Published: Sep 29, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image.

Affected (3)

Products: Andreas Gohr: Dokuwiki

Andreas Gohr

1 product

Dokuwiki

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Andreas Gohr Dokuwiki	Version release_2006-03-05
Andreas Gohr Dokuwiki	Version release_2006-03-09
Andreas Gohr Dokuwiki	Version release_2006-03-09e

References (10)

http://bugs.splitbrain.org/?do=details&id=924

Source: cve@mitre.org

ExploitPatch

http://secunia.com/advisories/22192

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/22199

Source: cve@mitre.org

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200609-20.xml

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3851

Source: cve@mitre.org

http://bugs.splitbrain.org/?do=details&id=924