PT-2002-1292 · Etype · Etype Eserv

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0221

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Etype Eserv version 2.97

Description The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by sending a large number of PASV commands. These commands consume ports 1024 through 5000, which in turn prevents the server from accepting valid PASV commands.

Recommendations For Etype Eserv version 2.97, consider restricting the number of PASV commands that can be sent to the server to prevent resource exhaustion, or implement rate limiting on the affected ports to minimize the risk of denial of service.

Correção

Identificadores relacionados

CVE-2002-0221

Produtos afetados

Etype Eserv

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0221 · Nota
• http://securityfocus.com/bid/3983 · Nota
• http://iss.net/security_center/static/8020.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0221 · Nota de Segurança
• http://online.securityfocus.com/archive/1/252944 · Aviso do Fabricante