PT-2002-2624 · Cgiforum · Cgiforum

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1902

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CGIForum versions 1.0 through 1.05

Description The issue allows remote attackers to cause a denial of service through infinite recursion by creating a message board post that is a child of an outdated parent.

Recommendations For CGIForum versions 1.0 through 1.05, consider restricting the ability to create message board posts that are children of outdated parents to prevent infinite recursion and denial of service.

Correção

Identificadores relacionados

CVE-2002-1902

Produtos afetados

Cgiforum

Referências · 4

• http://freshmeat.net/releases/86842 · Nota
• http://securityfocus.com/bid/4960 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1902 · Nota de Segurança
• http://iss.net/security_center/static/10055.php · Correção