Lucene search
HistoryOct 24, 2007 - 11:00 p.m.
CVE-2003-1462
mod_survey
denial of service
disk consumption
crash
cve-2003-1462
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).
Affected configurations
Node
mod_surveymod_surveyMatch3.0
ORmod_surveymod_surveyMatch3.0.1
ORmod_surveymod_surveyMatch3.0.2
ORmod_surveymod_surveyMatch3.0.3
ORmod_surveymod_surveyMatch3.0.4
ORmod_surveymod_surveyMatch3.0.5
ORmod_surveymod_surveyMatch3.0.6
ORmod_surveymod_surveyMatch3.0.7
ORmod_surveymod_surveyMatch3.0.8
ORmod_surveymod_surveyMatch3.0.9
ORmod_surveymod_surveyMatch3.0.10
ORmod_surveymod_surveyMatch3.0.11
ORmod_surveymod_surveyMatch3.0.12
ORmod_surveymod_surveyMatch3.0.13
ORmod_surveymod_surveyMatch3.0.14
ORmod_surveymod_surveyMatch3.0.14d
ORmod_surveymod_surveyMatch3.0.14e
ORmod_surveymod_surveyMatch3.0.15pre1
ORmod_surveymod_surveyMatch3.0.15pre2
ORmod_surveymod_surveyMatch3.0.15pre3
ORmod_surveymod_surveyMatch3.0.15pre4
ORmod_surveymod_surveyMatch3.0.15pre5
ORmod_surveymod_surveyMatch3.0.15pre6
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
Related for CVE-2003-1462