PT-2002-2148 · Analogx · Analog

Publicado 2002-10-11 · Atualizado 2008-09-05 · CVE-2002-1154

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Analog versions prior to 5.23

Description: The issue allows remote attackers to cause a denial of service by consuming disk space, resulting in the web server error log being filled. This is achieved by using the PROGRESSFREQ progress update command more frequently than intended.

Recommendations: For versions prior to 5.23, restrict access to the PROGRESSFREQ command to prevent remote attackers from causing a denial of service.

Correção

Identificadores relacionados

CVE-2002-1154

Produtos afetados

Analog

Referências · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1154 · Aviso do Fabricante
• http://analog.cx/security5.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2002-1154 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2002-059.html · Aviso do Fabricante
• http://iss.net/security_center/static/10344.php · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2002-1154 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1154 · Nota de Segurança
• http://osvdb.org/3779 · Nota