CVE Database
/

CVE-2002-1154

Back to search

CVE-2002-1154

Published: Sep 1, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2002:059
vendor-advisory
x_refsource_REDHAT
analog-anlgform-dos(10344)
vdb-entry
x_refsource_XF
3779
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now