5
CVSSv2

CVE-2002-1154

Published: 11/10/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

anlgform.pl in Analog prior to 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote malicious users to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

Vulnerable Product Search on Vulmon Subscribe to Product

stephen turner analog