From: Secunia Security Advisories (sec-advsecunia.com)
Date: Sat Jul 12 2003 - 03:54:47 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Coda File System RPC2 Denial of Service Vulnerability

READ ONLINE:
http://www.secunia.com/advisories/9246/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
From local network

SOFTWARE:
Coda File System 6.x

DESCRIPTION:
A vulnerability has been identified in Coda File System, which can be
exploited by malicious people to cause a DoS (Denial of Service) on
certain programs.

The vulnerability is caused due to an error in the handling of RPC2
packets. This can be exploited to crash any program using the RPC2
library by sending a specially crafted packet to the service.

The vulnerability has been reported in version 6.0.1. However, prior
versions may also be affected.

SOLUTION:
A fix has been comitted to CVS:
http://www.coda.cs.cmu.edu/mirrors.html

REPORTED BY / CREDITS:
Andrew Griffiths

ORIGINAL ADVISORY:
http://felinemenace.org/advisories/codados

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]