6.4
CVSSv2

CVE-2012-6619

Published: 06/03/2014 Updated: 07/05/2014
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 571
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

The default configuration for MongoDB prior to 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

mongodb mongodb 1.2.0

mongodb mongodb 1.4.0

mongodb mongodb 1.6.0

mongodb mongodb 1.8.0

mongodb mongodb 2.0.0

mongodb mongodb 2.0.1

mongodb mongodb 2.0.2

mongodb mongodb 2.0.3

mongodb mongodb 2.0.4

mongodb mongodb 2.0.5

mongodb mongodb 2.0.6

mongodb mongodb 2.0.7

mongodb mongodb 2.0.8

mongodb mongodb 2.2.0

mongodb mongodb 2.2.1

mongodb mongodb 2.2.2

mongodb mongodb 2.2.3

mongodb mongodb 2.2.4

mongodb mongodb 2.2.5

mongodb mongodb 2.2.6

mongodb mongodb 2.2.7

mongodb mongodb 2.3.0

mongodb mongodb

Github Repositories

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing Installing with pip This is the recommended installation method in case you have python and pip pip install mongoaudit Alternative installer Use this if and only if python and pip are not available on your platform curl -s mongoaudit/

A powerful MongoDB auditing and pentesting tool

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing Installing with pip This is the recommended installation method in case you have python and pip pip install mongoaudit Alternative installer Use this if and only if python and pip are not available on your platform curl -s mongoaudit/

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing Installing with pip This is the recommended installation method in case you have python and pip pip install mongoaudit Alternative installer Use this if and only if python and pip are not available on your platform curl -s mongoaudit/