SecureAction Research Secure Network Messenger Remote Denial Of Service Vulnerability

Bugtraq ID:	11670
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2004 12:00AM
Updated:	Nov 12 2004 12:00AM
Credit:	Discovery of this issue is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	SecureAction Research Secure Network Messenger 1.4.2 SecureAction Research Secure Network Messenger 1.4.1 SecureAction Research Secure Network Messenger 1.4
Not Vulnerable:

SecureAction Research Secure Network Messenger Remote Denial Of Service Vulnerability

A remote denial of service vulnerability affects SecureAction Research Secure Network Messenger. This issue is due to a failure of the application to properly handle exceptional network data.

An attacker may leverage this issue to cause a computer running the vulnerable application to crash, denying service to legitimate users.

SecureAction Research Secure Network Messenger Remote Denial Of Service Vulnerability

No exploit is required to leverage this issue. A proof of concept exploit is made available by clearscreen:

• /data/vulnerabilities/exploits/NetworkMessengerDOS.pl

SecureAction Research Secure Network Messenger Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SecureAction Research Secure Network Messenger Remote Denial Of Service Vulnerability

References:

• Secure Network Messenger Home Page (SecureAction Research)
  
• Crash in Secure Network Messenger 1.4.2 (Luigi Auriemma )