PT-2004-2631 · Badblue · Badblue
Published
2004-08-20
·
Updated
2017-07-11
·
CVE-2004-1727
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
BadBlue version 2.5
Description
The issue allows remote attackers to cause a denial of service, which results in the refusal of HTTP connections. This can be achieved by establishing a large number of connections from the same IP address.
Recommendations
For BadBlue version 2.5, consider restricting the number of connections allowed from a single IP address to prevent denial of service attacks. Additionally, implementing rate limiting on incoming connections can help mitigate the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Badblue