eZ Multiple Products Connection Saturation Remote DoS

medium Nessus Network Monitor Plugin ID 2268

Synopsis

The remote host is vulnerable to a Denial of Service (DoS) attack.

Description

The remote host appears to be running eZ or eZphotoshare. It is reported that this software is vulnerable to a remote denial of service. An attacker may remotely crash eZphotoshare or eZ by establishing over 80 simultaneous connections to the server.

Solution

No solution is known at this time.

Plugin Details

Severity: Medium

ID: 2268

Family: Web Clients

Published: 9/7/2004

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.6

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:U/RL:U/RC:X

Reference Information

BID: 11129