OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA19535] SynchronEyes Denial of Service Vulnerabilities

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Apr 05 2006 - 08:17:04 CDT

TITLE:
SynchronEyes Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA19535

VERIFY ADVISORY:
http://secunia.com/advisories/19535/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
From local network

SOFTWARE:
SynchronEyes 6.x
http://secunia.com/product/9177/

DESCRIPTION:
Dennis Elser has reported two vulnerabilities in SynchronEyes, which
can be exploited by malicious people to cause a DoS (Denial of
Service).

1) An error in the handling of UDP datagrams can be exploited to
cause the application to stop processing further traffic by sending
an overly long UDP datagram to port 5496.

2) An error in the communication handling can be exploited to cause
the application to allocate a large amount of memory resources on a
vulnerable system by supplying an overly large size parameter when
communicating over port 5461/tcp.

The vulnerabilities have been reported in version 6.0. Other versions
may also be affected.

SOLUTION:
Use the application on trusted networks only.

NOTE: The vulnerabilities will reportedly be fixed soon.

PROVIDED AND/OR DISCOVERED BY:
Dennis Elser

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------