CVE

Id
10945  
CVE No.
CVE-2004-2519  
Status
Candidate  
Description
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specifiers in the LANGUAGE parameter to (1) index.tmpl and (2) web.tmpl, such as (a) slash "/", (b) backslash "", (c) dot ".",, (d) dot dot "..", and (e) internal slash "lang//en".  
Phase
Assigned (20051025)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76655 10945 CVE-2004-2519 MISC:http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt  View
76656 10945 CVE-2004-2519 CONFIRM:http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion;action=display;num=1091194176;start=0#0  View
76657 10945 CVE-2004-2519 BID:10728  View
76658 10945 CVE-2004-2519 URL:http://www.securityfocus.com/bid/10728  View
76659 10945 CVE-2004-2519 OSVDB:7923  View
76660 10945 CVE-2004-2519 URL:http://www.osvdb.org/7923  View
76661 10945 CVE-2004-2519 SECTRACK:1010703  View
76662 10945 CVE-2004-2519 URL:http://securitytracker.com/id?1010703  View
76663 10945 CVE-2004-2519 SECUNIA:12071  View
76664 10945 CVE-2004-2519 URL:http://secunia.com/advisories/12071  View
76665 10945 CVE-2004-2519 XF:gattaca-language-path-disclosure(16700)  View

Related JVN