Lucene search

[email protected]CVE-2004-0247

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0247

2004-11-2305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

chaser

1.50

denial of service

udp

cve-2004-0247

nvd

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.4%

JSON

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.

CPENameOperatorVersion
cauldron:chaser_clientcauldron chaser clienteq1.5
cauldron:chaser_servercauldron chaser servereq1.5
cauldron:chaser_servercauldron chaser servereq1.4.9

CPE	Name	Operator	Version
cauldron:chaser_client	cauldron chaser client	eq	1.5
cauldron:chaser_server	cauldron chaser server	eq	1.5
cauldron:chaser_server	cauldron chaser server	eq	1.4.9

References

marc.info/?l=bugtraq&m=107584109420084&w=2

www.securityfocus.com/bid/9567

exchange.xforce.ibmcloud.com/vulnerabilities/15031

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.4%

JSON

Related for CVE-2004-0247

checkpoint_advisories1