CVE-2004-2078
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.3 High
AI Score
Confidence
High
0.063 Low
EPSS
Percentile
93.7%
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| red-m:red-alert | red-m red-alert | eq | 2.7.5_v3.1_build_24 |
References
genhex.org/releases/031003.txt
marc.info/?l=full-disclosure&m=107635119005407&w=2
secunia.com/advisories/10832
securitytracker.com/id?1009001
www.osvdb.org/3891
www.securiteam.com/securitynews/5SP0C0KC0A.html
www.securityfocus.com/archive/1/353211
www.securityfocus.com/bid/9618
exchange.xforce.ibmcloud.com/vulnerabilities/15086
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.3 High
AI Score
Confidence
High
0.063 Low
EPSS
Percentile
93.7%