漏洞信息详情
OpenText FirstClass HTTP Daemon Search函数服务拒绝漏洞
- CNNVD编号:CNNVD-200412-610
- 危害等级: 高危
- CVE编号:
CVE-2004-2496
- 漏洞类型:
其他
- 发布时间:
2004-12-31
- 威胁类型:
远程
- 更新时间:
2006-09-05
- 厂 商:
opentext - 漏洞来源:
Discovery of this … -
漏洞简介
OpenText FirstClass 7.1和8.0版本的HTTP守护程序存在漏洞。远程攻击者可以借助许多对/Search的POST请求导致服务拒绝(服务有效性丢失)。
漏洞公告
A fix is available to address this vulnerability. Customers are advised to contact the vendor for further details in regard to obtaining and applying an appropriate fix.
参考网址
来源: XF
名称: firstclass-dos(18424)
链接:http://xforce.iss.net/xforce/xfdb/18424
来源: BID
名称: 11877
链接:http://www.securityfocus.com/bid/11877
来源: OSVDB
名称: 12350
链接:http://www.osvdb.org/12350
来源: SECTRACK
名称: 1012478
链接:http://securitytracker.com/id?1012478
来源: SECUNIA
名称: 13415
链接:http://secunia.com/advisories/13415
来源: FULLDISC
名称: 20041214 OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability
链接:http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html