CVE-2007-3871

Publication date

2007-09-12 19:00:00

Family

mitre

State

PUBLISHED

Description

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.