20041214 OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerabilitymailing list
http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html CVE-2004-2496
OpenText FirstClass 8.0 - HTTP Daemon /Search Remote Denial of Service
Record summary
CVE-2004-2496 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOpenText FirstClass 8.0 - HTTP Daemon /Search Remote Denial of ServiceExploitDB exploitby dilaNot analyzed1 file
References
713415Third-party advisory
http://secunia.com/advisories/13415 1012478vdb entry
http://securitytracker.com/id?1012478 12350vdb entry
http://www.osvdb.org/12350 11877vdb entry
http://www.securityfocus.com/bid/11877 firstclass-dos(18424)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18424 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-2496