CVE-2004-1981 The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are n...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| businessobjects crystal enterprise | = 9 | No fix listed |
| businessobjects crystal enterprise | = 10 | No fix listed |
| businessobjects crystal reports | = 9 | No fix listed |
| businessobjects crystal reports | = 10 | No fix listed |
References
- 20040502 Crystal Reports Vulnerabilities mailing-list
- 20040608 Vulnerability: Arbitrary File Access & DoS in Crystal Reports mailing-list
- crystalreports-dos(16046) vdb-entry