Vulnerabilities > CVE-2002-1780 - Denial-Of-Service vulnerability in Alcatech Gmbh BPM Studio PRO 4.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
alcatech-gmbh

Summary

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such applications should not be considered vulnerable themselves.

Vulnerable Configurations

Part Description Count
Application
Alcatech_Gmbh
1