|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[SA14077] Eternal Lines Web Server Multiple Connections Denial of Service
From: Secunia Security Advisories (sec-adv
secunia.com)
Date: Tue Feb 01 2005 - 03:34:56 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
TITLE:
Eternal Lines Web Server Multiple Connections Denial of Service
SECUNIA ADVISORY ID:
SA14077
VERIFY ADVISORY:
http://secunia.com/advisories/14077/
CRITICAL:
Moderately critical
IMPACT:
DoS
WHERE:
From remote
SOFTWARE:
Eternal Lines Web Server 1.x
http://secunia.com/product/4584/
DESCRIPTION:
Ziv Kamir has reported a vulnerability in Eternal Lines Web Server,
which can be exploited by malicious people to cause a DoS (Denial of
Service).
The vulnerability is caused due to an error in the connection
handling and can be exploited to block legitimate access to the web
server by establishing about 70 connections. This prevents further
connections from being established.
The vulnerability has been reported in version 1.0.
SOLUTION:
Use another product.
PROVIDED AND/OR DISCOVERED BY:
Ziv Kamir, GSS-IT.
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------
Unsubscribe: Secunia Security Advisories
----------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]