CVE-2002-2174 Denial of service in n/a
Remote attackers can cause denial of service via memory consumption by exploiting unlimited Telnet proxy connections in 602Pro LAN SUITE.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2174?
CVE-2002-2174 is a medium-severity denial of service vulnerability in n/a, published on 16 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service (memory consumption) via a large number of connections.
Which versions are affected by CVE-2002-2174?
It affects 1 product.
Products include Software602 602pro Lan Suite.
How do I fix CVE-2002-2174?
No fix has been published for CVE-2002-2174 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2002-2174 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-2174 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-58p5-3cgm-hvjh.