Info

Disclosure

Sep 23, 2004

Discovery

Unknown

Dates

Exploit

Sep 23, 2004

Solution

Unknown

Description

ActivePost Standard contains a flaw that may allow a remote denial of service. The issue is triggered when a filename longer than 4074 characters is supplied, and will result in loss of availability for the service.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Available

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

ONNURI INFOTEK Co	ActivePost Standard	3.1
		3.0
		2.5

References

Security Tracker: 1011406
Related OSVDB ID: 10234 10235 10236
Secunia Advisory ID: 12642
CVE ID: 2004-1547 (see also: NVD)
Other Advisory URL: http://aluigi.altervista.org/adv/actp-adv.txt
Generic Exploit URL: http://aluigi.altervista.org/poc/actpboom.zip
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html
Vendor Specific Solution URL: http://www.activepost.net/
Keyword: TCP Port 6004

Credit

Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

ONNURI INFOTEK Co

ActivePost Standard

References

Credit