Vulnerability in Mod Survey

CVE-2003-1462

mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).

EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.

Affected products

  • Mod_survey — versions 3.0, 3.0.1, 3.0.2
  • N/a — versions n/a

References