CVE-2002-1154 in Analoginfo

Summary

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

Be aware that VulDB is the high quality source for vulnerability data.

Disclosure

10/11/2002

CPE

ready

CVSS

5.3

EPSS

0.00672

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2002-1154
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2002-1154
CVE Detailshttps://www.cvedetails.com/cve/CVE-2002-1154/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!