PT-2002-2148 · Analogx · Analog

Published 2002-10-11 · Updated 2008-09-05 · CVE-2002-1154

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Analog versions prior to 5.23

Description: The issue allows remote attackers to cause a denial of service by consuming disk space, resulting in the web server error log being filled. This is achieved by using the PROGRESSFREQ progress update command more frequently than intended.

Recommendations: For versions prior to 5.23, restrict access to the PROGRESSFREQ command to prevent remote attackers from causing a denial of service.

Fix

Related Identifiers

CVE-2002-1154

Affected Products

Analog

References · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1154 · Vendor Advisory
• http://analog.cx/security5.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1154 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-059.html · Vendor Advisory
• http://iss.net/security_center/static/10344.php · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1154 · Security Note
• http://osvdb.org/3779 · Note