ID CVE-2001-0598
Summary Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.
References
Vulnerable Configurations
  • cpe:2.3:a:symantec:norton_ghost:-:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_ghost:-:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 19-12-2017 - 02:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 2570
bugtraq 20010411 def-2001-21: Ghost Multiple DoS
xf ghost-configuration-server-dos(6357)
Last major update 19-12-2017 - 02:29
Published 02-08-2001 - 04:00
Last modified 19-12-2017 - 02:29
Back to Top