CVE

CVE-2002-1159

Date: (C)2002-12-18   (M)2023-12-22

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.4
Exploit Score: 10.0
Impact Score: 4.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: PARTIAL

Reference:

BID-6354

DSA-224

RHSA-2002:246

RHSA-2002:261

RHSA-2003:115

canna-improper-request-validation(10832)

http://canna.sourceforge.jp/sec/Canna-2002-01.txt