CVE-2002-1154

UNKNOWN

anlgform

Published Sep 1, 2004

Modified 1 years ago

No fix available

Details

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

References

WEBhttp://www.analog.cx/security5.html WEBhttp://www.iss.net/security_center/static/10344.php WEBhttp://www.osvdb.org/3779 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2002-059.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2002-1154

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

PartialA:P

5/AV:N/AC:L/Au:N/C:N/I:N/A:P

Ecosystems

Timeline

PublishedSep 1, 2004

ModifiedAug 8, 2024