CVE-2004-2496: High severity OpenText OpenText FirstClass vulnerability
Published Dec 31, 2004
·Updated
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.
Affected Software
4 affected components
OpenText OpenText FirstClass=7.1
OpenText OpenText FirstClass=8.0
OpenText OpenText FirstClass=7.1
OpenText OpenText FirstClass=8.0
Event History
Dec 31, 2004
CVE Published
05:00 AM
Oct 25, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2496?
CVE-2004-2496 is classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2004-2496?
To mitigate CVE-2004-2496, you should limit the number of POST requests allowed to the /Search endpoint.
3
What software is affected by CVE-2004-2496?
CVE-2004-2496 affects OpenText FirstClass version 7.1 and 8.0.
4
Can CVE-2004-2496 cause a complete service outage?
Yes, CVE-2004-2496 can lead to service availability loss due to excessive POST requests.
5
Is there a known exploit for CVE-2004-2496?
Yes, exploits for CVE-2004-2496 have been reported, demonstrating its impact on service availability.