PT-2002-2624 · Cgiforum · Cgiforum

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1902

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CGIForum versions 1.0 through 1.05

Description The issue allows remote attackers to cause a denial of service through infinite recursion by creating a message board post that is a child of an outdated parent.

Recommendations For CGIForum versions 1.0 through 1.05, consider restricting the ability to create message board posts that are children of outdated parents to prevent infinite recursion and denial of service.

Fix

Related Identifiers

CVE-2002-1902

Affected Products

Cgiforum

References · 4

• http://securityfocus.com/bid/4960 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1902 · Security Note
• http://iss.net/security_center/static/10055.php · Patch
• http://freshmeat.net/releases/86842 · Note