PT-2002-1460 · Menasoft · Menasoft Sphere Server

Publicado 2002-07-26 · Atualizado 2008-09-05 · CVE-2002-0406

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Menasoft SPHERE server versions 0.5x through 0.99x

Description The issue allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in.

Recommendations For Menasoft SPHERE server versions 0.5x through 0.99x, consider implementing connection limits or rate limiting to prevent excessive connections without login credentials. As a temporary workaround, restrict access to the server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2002-0406

Produtos afetados

Menasoft Sphere Server

Referências · 5

• 🔥 http://securityfocus.com/bid/4258 · Exploit
• 🔥 https://exploit-db.com/exploits/21337 · Exploit
• http://online.securityfocus.com/archive/1/259334 · Aviso do Fabricante
• http://iss.net/security_center/static/8338.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0406 · Nota de Segurança