Lucene search

[email protected]CVE-2004-2297

HistoryAug 04, 2005 - 4:00 a.m.

CVE-2004-2297

2005-08-0404:00:00

[email protected]

web.nvd.nist.gov

php-nuke

reviews

module

vulnerability

dos

cpu

memory

nvd

cve-2004-2297

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.185 Low

EPSS

Percentile

96.2%

JSON

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter.

Affected configurations

NVD

Node

francisco_burziphp-nukeMatch6.0

francisco_burziphp-nukeMatch6.5

francisco_burziphp-nukeMatch6.5_beta1

francisco_burziphp-nukeMatch6.5_final

francisco_burziphp-nukeMatch6.5_rc1

francisco_burziphp-nukeMatch6.5_rc2

francisco_burziphp-nukeMatch6.5_rc3

francisco_burziphp-nukeMatch6.6

francisco_burziphp-nukeMatch6.7

francisco_burziphp-nukeMatch6.9

francisco_burziphp-nukeMatch7.0

francisco_burziphp-nukeMatch7.0_final

francisco_burziphp-nukeMatch7.1

francisco_burziphp-nukeMatch7.2

francisco_burziphp-nukeMatch7.3

CPENameOperatorVersion
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.0
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_beta1
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_final
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc1
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc2
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc3
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.6
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.7
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.9

CPE	Name	Operator	Version
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.0
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_beta1
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_final
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc1
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc3
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.6
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.7
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.9

Rows per page:

1-10 of 151

References

archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html

secunia.com/advisories/11852

www.osvdb.org/7002

www.osvdb.org/7003

www.securityfocus.com/archive/1/365865

www.securityfocus.com/bid/10524

exchange.xforce.ibmcloud.com/vulnerabilities/16409

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.185 Low

EPSS

Percentile

96.2%

JSON

Related for CVE-2004-2297

cvelist1 nvd1