CVE-2007-0533 - Vulnerability Details - OpenCVE

The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.02924.

Key SSVC decision points have not yet been added.

Vendors	Products
Atozed Software	Intraweb Component

Configuration 1 [-]

OR	cpe:2.3:a:atozed_software:intraweb_component::::::::
	cpe:2.3:a:atozed_software:intraweb_component:9.0:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-0531	The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://blogs.atozed.com/Olaf/20070124.en.aspx
http://blogs.atozed.com/Olaf/20070124A.en.aspx
http://osvdb.org/32973
http://secunia.com/advisories/23902
http://www.securityfocus.com/archive/1/457758/100/0/threaded
http://www.securityfocus.com/archive/1/457947/100/0/threaded
http://www.securityfocus.com/archive/1/458121/100/0/threaded
http://www.securityfocus.com/bid/22185
http://www.vupen.com/english/advisories/2007/0355
https://exchange.xforce.ibmcloud.com/vulnerabilities/31685

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-26T01:00:00

Updated: 2024-08-07T12:19:30.520Z

Reserved: 2007-01-25T00:00:00

Link: CVE-2007-0533

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-01-26T01:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0533

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-23T00:00:00", "descriptions": [{"lang": "en", "value": "The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20070124 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/457947/100/0/threaded"}, {"name": "intraweb-component-dos(31685)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31685"}, {"name": "23902", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23902"}, {"name": "22185", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22185"}, {"name": "ADV-2007-0355", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0355"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://blogs.atozed.com/Olaf/20070124A.en.aspx"}, {"name": "20070123 AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/457758/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://blogs.atozed.com/Olaf/20070124.en.aspx"}, {"name": "20070125 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/458121/100/0/threaded"}, {"name": "32973", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/32973"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0533", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20070124 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/457947/100/0/threaded"}, {"name": "intraweb-component-dos(31685)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31685"}, {"name": "23902", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23902"}, {"name": "22185", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22185"}, {"name": "ADV-2007-0355", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0355"}, {"name": "http://blogs.atozed.com/Olaf/20070124A.en.aspx", "refsource": "CONFIRM", "url": "http://blogs.atozed.com/Olaf/20070124A.en.aspx"}, {"name": "20070123 AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/457758/100/0/threaded"}, {"name": "http://blogs.atozed.com/Olaf/20070124.en.aspx", "refsource": "CONFIRM", "url": "http://blogs.atozed.com/Olaf/20070124.en.aspx"}, {"name": "20070125 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/458121/100/0/threaded"}, {"name": "32973", "refsource": "OSVDB", "url": "http://osvdb.org/32973"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:19:30.520Z"}, "title": "CVE Program Container", "references": [{"name": "20070124 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/457947/100/0/threaded"}, {"name": "intraweb-component-dos(31685)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31685"}, {"name": "23902", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23902"}, {"name": "22185", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22185"}, {"name": "ADV-2007-0355", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0355"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://blogs.atozed.com/Olaf/20070124A.en.aspx"}, {"name": "20070123 AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/457758/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://blogs.atozed.com/Olaf/20070124.en.aspx"}, {"name": "20070125 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/458121/100/0/threaded"}, {"name": "32973", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/32973"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0533", "datePublished": "2007-01-26T01:00:00", "dateReserved": "2007-01-25T00:00:00", "dateUpdated": "2024-08-07T12:19:30.520Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:atozed_software:intraweb_component:*:*:*:*:*:*:*:*", "matchCriteriaId": "52CD1200-6382-4F6F-9BFB-F58B72CFE8DA", "versionEndIncluding": "8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atozed_software:intraweb_component:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "8D423257-82FC-4931-87DF-CB68508B5A62", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object."}, {"lang": "es", "value": "El componente AToZed IntraWeb 8.0 y versiones anteriores para Borland Delphi y Kylix, e IntraWeb 9.0 versiones anteriores a build (9.0.12), permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de hilo \u00f3 agotamiento de CPU) mediante una petici\u00f3n HTTP manipulada, referida a la funci\u00f3n OnBeforeDispatch en el objeto TIWServerController."}], "id": "CVE-2007-0533", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-26T01:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://blogs.atozed.com/Olaf/20070124.en.aspx"}, {"source": "cve@mitre.org", "url": "http://blogs.atozed.com/Olaf/20070124A.en.aspx"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/32973"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23902"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/457758/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/457947/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/458121/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22185"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0355"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31685"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://blogs.atozed.com/Olaf/20070124.en.aspx"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://blogs.atozed.com/Olaf/20070124A.en.aspx"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/32973"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/23902"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/457758/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/457947/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/458121/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22185"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0355"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31685"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}