anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Analog | Stephen_turner | * | 5.23 (including) |