PT-2002-1460 · Menasoft · Menasoft Sphere Server

Published 2002-07-26 · Updated 2008-09-05 · CVE-2002-0406

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Menasoft SPHERE server versions 0.5x through 0.99x

Description The issue allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in.

Recommendations For Menasoft SPHERE server versions 0.5x through 0.99x, consider implementing connection limits or rate limiting to prevent excessive connections without login credentials. As a temporary workaround, restrict access to the server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-0406

Affected Products

Menasoft Sphere Server

References · 5

• 🔥 http://securityfocus.com/bid/4258 · Exploit
• 🔥 https://exploit-db.com/exploits/21337 · Exploit
• http://online.securityfocus.com/archive/1/259334 · Vendor Advisory
• http://iss.net/security_center/static/8338.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0406 · Security Note