CVE-2002-1159 Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
MediumCVSS 6.4
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canna | = 3.5b2 | No fix listed |
| canna | = 3.6 | No fix listed |
| debian/canna(Debian:12) | < 3.6p1-1 | 3.6p1-1 |
| debian/canna(Debian:13) | < 3.6p1-1 | 3.6p1-1 |
| debian/canna(Debian:14) | < 3.6p1-1 | 3.6p1-1 |
References
- canna.sourceforge.jp
- DSA-224 patch vendor-advisory
- RHSA-2002:246 patch vendor-advisory
- RHSA-2002:261 vendor-advisory
- RHSA-2003:115 vendor-advisory
- 6354 vdb-entry
- canna-improper-request-validation(10832) vdb-entry
- Debian Security Tracker CVE-2002-1159 vendor-advisory