Lucene search

K
nvd[email protected]NVD:CVE-2002-1661
HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1661

2002-12-3105:00:00
web.nvd.nist.gov
2

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.046

Percentile

92.6%

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.

Affected configurations

Nvd
Node
leafnodeleafnodeMatch1.9.19
OR
leafnodeleafnodeMatch1.9.20
OR
leafnodeleafnodeMatch1.9.21
OR
leafnodeleafnodeMatch1.9.22
OR
leafnodeleafnodeMatch1.9.23
OR
leafnodeleafnodeMatch1.9.24
OR
leafnodeleafnodeMatch1.9.25
OR
leafnodeleafnodeMatch1.9.26
OR
leafnodeleafnodeMatch1.9.27
OR
leafnodeleafnodeMatch1.9.29
VendorProductVersionCPE
leafnodeleafnode1.9.19cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*
leafnodeleafnode1.9.20cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*
leafnodeleafnode1.9.21cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*
leafnodeleafnode1.9.22cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*
leafnodeleafnode1.9.23cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*
leafnodeleafnode1.9.24cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*
leafnodeleafnode1.9.25cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*
leafnodeleafnode1.9.26cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*
leafnodeleafnode1.9.27cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*
leafnodeleafnode1.9.29cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.046

Percentile

92.6%