ID CVE-2005-4813
Summary Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections.
References
Vulnerable Configurations
  • cpe:2.3:a:businessobjects:crystal_enterprise_xi:*:*:*:*:*:*:*:*
    cpe:2.3:a:businessobjects:crystal_enterprise_xi:*:*:*:*:*:*:*:*
  • cpe:2.3:a:businessobjects:crystal_reports_server_xi:*:*:*:*:*:*:*:*
    cpe:2.3:a:businessobjects:crystal_reports_server_xi:*:*:*:*:*:*:*:*
  • cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:*:*:*:*:*:*
    cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:*:*:*:*:*:*
  • cpe:2.3:a:businessobjects:report_application_server:11.0.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:businessobjects:report_application_server:11.0.0.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 14433
confirm
osvdb 18473
sectrack
  • 1014604
  • 1014605
secunia 16282
xf business-object-crystal-server-dos(21654)
Last major update 20-07-2017 - 01:29
Published 31-12-2005 - 05:00
Last modified 20-07-2017 - 01:29
Back to Top