CVEvulnerability

CVE-2002-1063

5.0 MEDIUM Published 2002-10-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.

Affected configurations

• t. hauck jana web server 1.0 • t. hauck jana web server 1.45 • t. hauck jana web server 1.46 • t. hauck jana web server 2.0 • t. hauck jana web server 2.0 beta1 • t. hauck jana web server 2.0 beta2 • t. hauck jana web server 2.2.1

References