CVE-2004-1981: Medium severity BusinessObjects Crystal Reports vulnerability
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1981?
CVE-2004-1981 has a moderate severity level as it can lead to denial of service due to disk exhaustion.
How do I fix CVE-2004-1981?
To fix CVE-2004-1981, implement measures to limit report requests and ensure regular clean-up of the image file folder.
What impact does CVE-2004-1981 have on affected systems?
CVE-2004-1981 can cause affected systems to become unresponsive due to excessive disk space usage.
Which versions of software are affected by CVE-2004-1981?
CVE-2004-1981 affects SAP Crystal Reports version 9 and 10 as well as SAP BusinessObjects Crystal Enterprise version 9 and 10.
Are there any workarounds for CVE-2004-1981?
Workarounds for CVE-2004-1981 include monitoring usage and setting up quotas on disk space for the image file folder.