IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.
Vector
NETWORK
Complexity
LOW
Authentication
SINGLE_INSTANCE
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Advisory | Patch | Confirmed | Link |
---|---|---|---|
cognos-bi-nullbyte-dos(79536) | |||
http://www.ibm.com/support/docview.wss?uid=swg21615445 |