Jera Technology Flash Messaging Server Remote Denial of Service Vulnerability

Bugtraq ID:	11351
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 07 2004 12:00AM
Updated:	Oct 07 2004 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Jera Technology Flash Messaging 5.2 g Jera Technology Flash Messaging 5.2
Not Vulnerable:

Jera Technology Flash Messaging Server Remote Denial of Service Vulnerability

Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions properly. A remote attacker may cause a vulnerable server to crash, denying service to legitimate users.

Flash Messaging server 5.2.0g and prior versions are reported prone to this issue.

Jera Technology Flash Messaging Server Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/flashmsg.tar

Jera Technology Flash Messaging Server Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Jera Technology Flash Messaging Server Remote Denial of Service Vulnerability

References:

• Flash Messaging Home Page (Jera Technology)
  
• Server crash in Flash Messaging 5.2.0g (Luigi Auriemma )