|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
A remote overflow exists in Oops! proxy server. The proxy server fails to properly format log messages resulting in a format string overflow. With a specially crafted request, an attacker can cause the server to crash resulting in a loss of availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Gentoo users should upgrade to version 1.5.24_pre20050503 or higher, as it has been reported to fix this vulnerability.
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-proxy/oops-1.5.24_pre20050503"
Other users may upgrade to the current version in CVS from the vendor's web site or apply the vendor-provided patch.
|
|
Products |
|
Oops! Proxy Server
 |
1.5.53 and earlier |
|
|
|
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
