PT-2005-5474 · Sap · Business Objects Crystal Reports+2

Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4813

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Business Objects Crystal Reports XI versions prior to 11.0.0.1370 Crystal Reports Server XI versions prior to 11.0.0.1370 BusinessObjects Enterprise XI versions prior to 11.0.0.1370

Description The issue allows remote attackers to cause a denial of service, resulting in an application hang, via certain network traffic. This could possibly involve multiple simultaneous TCP connections.

Recommendations For Business Objects Crystal Reports XI versions prior to 11.0.0.1370, update to version 11.0.0.1370 or later. For Crystal Reports Server XI versions prior to 11.0.0.1370, update to version 11.0.0.1370 or later. For BusinessObjects Enterprise XI versions prior to 11.0.0.1370, update to version 11.0.0.1370 or later.

Fix

Related Identifiers

CVE-2005-4813

Affected Products

Business Objects Crystal Reports

Sap Businessobjects Enterprise Xi

Crystal Reports Server

References · 9

• http://support.businessobjects.com/library/kbase/articles/c2017748.asp · Patch
• http://support.businessobjects.com/downloads/critical_updates/security_bulletin_june05.asp · Patch
• http://secunia.com/advisories/16282 · Vendor Advisory
• http://securityfocus.com/bid/14433 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4813 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21654 · Note
• http://osvdb.org/18473 · Note
• http://securitytracker.com/id?1014605 · Note
• http://securitytracker.com/id?1014604 · Note