ID CVE-2005-4203
Summary LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this description accurately reflects the discloser's claim and is distinct from the XSS issue.
References
Vulnerable Configurations
  • cpe:2.3:a:logisphere:logisphere:0.9.9j:*:*:*:*:*:*:*
    cpe:2.3:a:logisphere:logisphere:0.9.9j:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 15807
misc http://www.ipomonis.com/advisories/logisphere_server.zip
secunia 17989
vupen ADV-2005-2840
xf logisphere-msg-dos(23553)
Last major update 20-07-2017 - 01:29
Published 13-12-2005 - 11:03
Last modified 20-07-2017 - 01:29
Back to Top