PT-2005-4750 · Php · Php Web Statistik

Ascii + 1 · Publicado 2005-12-05 · Atualizado 2017-07-20 · CVE-2005-4014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PHP Web Statistik version 1.4

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a large value for the lastnumber variable in the stat.php file.

Recommendations For PHP Web Statistik version 1.4, consider restricting access to the stat.php file or limiting the value of the lastnumber variable to prevent excessive CPU consumption until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4014

Produtos afetados

Php Web Statistik

Referências · 8

• http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4014 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23384 · Nota
• http://osvdb.org/21211 · Nota
• http://vupen.com/english/advisories/2005/2645 · Nota
• http://secunia.com/advisories/17789 · Aviso do Fabricante
• http://ush.it/2005/11/19/php-web-statistik · Aviso do Fabricante
• http://freewebstat.com/changelog-english.html · Nota