PT-2005-4750 · Php · Php Web Statistik

Ascii + 1 · Published 2005-12-05 · Updated 2017-07-20 · CVE-2005-4014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PHP Web Statistik version 1.4

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a large value for the lastnumber variable in the stat.php file.

Recommendations For PHP Web Statistik version 1.4, consider restricting access to the stat.php file or limiting the value of the lastnumber variable to prevent excessive CPU consumption until a patch is available.

Fix

Related Identifiers

CVE-2005-4014

Affected Products

Php Web Statistik

References · 8

• http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4014 · Security Note
• http://secunia.com/advisories/17789 · Vendor Advisory
• http://ush.it/2005/11/19/php-web-statistik · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23384 · Note
• http://osvdb.org/21211 · Note
• http://vupen.com/english/advisories/2005/2645 · Note
• http://freewebstat.com/changelog-english.html · Note