Vulnerability in Businessobjects Crystal Enterprise
CVE-2004-1981
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
EPSS: 0.016 (74.1th percentile) — read the EPSS interpretation.
Affected products
- Businessobjects Crystal_enterprise — versions 9, 10
- Businessobjects Crystal_reports — versions 9, 10
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)