Vulnerability Details : CVE-2005-4813
Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2005-4813
Probability of exploitation activity in the next 30 days: 3.30%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 90 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2005-4813
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2005-4813
-
http://securitytracker.com/id?1014605
-
http://support.businessobjects.com/downloads/critical_updates/security_bulletin_june05.asp
Patch
-
http://www.securityfocus.com/bid/14433
Patch
-
http://securitytracker.com/id?1014604
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/21654
-
http://support.businessobjects.com/library/kbase/articles/c2017748.asp
Patch
Products affected by CVE-2005-4813
- cpe:2.3:a:businessobjects:crystal_enterprise_xi:*:*:*:*:*:*:*:*
- cpe:2.3:a:businessobjects:crystal_reports_server_xi:*:*:*:*:*:*:*:*
- cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:*:*:*:*:*:*
- cpe:2.3:a:businessobjects:report_application_server:11.0.0.0:*:*:*:*:*:*:*