PT-2004-2878 · Sap · Crystal Reports

Published 2004-05-02 · Updated 2017-07-11 · CVE-2004-1981

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Crystal Reports (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, specifically disk exhaustion, by repeatedly requesting reports without retrieving the associated image files. These image files are not cleared from the image file folder, leading to disk space depletion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-1981

Affected Products

Crystal Reports

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-1981 · Security Note
• http://marc.info/?l=bugtraq&m=108671836127360&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16046 · Note
• http://marc.info/?l=bugtraq&m=108360413811017&w=2 · Note