Vipul Razor-agents Multiple Unspecified Denial Of Service Vulnerabilities

Bugtraq ID:	13984
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-2024
Remote:	Yes
Local:	No
Published:	Jun 17 2005 12:00AM
Updated:	Mar 06 2007 08:15PM
Credit:	Discovery of these issues is credited to Martin Blapp and Nick Leverton.
Vulnerable:	Vipul razor-agents 2.126 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Vipul razor-agents 2.72 Vipul razor-agents 2.71 Vipul razor-agents 2.70 Vipul razor-agents 2.67 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Vipul razor-agents 2.61 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Vipul razor-agents 2.36 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Vipul razor-agents 2.34 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Enterprise Linux 2.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 Gentoo Linux
Not Vulnerable:	Vipul razor-agents 2.74 Vipul razor-agents 2.72

Vipul Razor-agents Multiple Unspecified Denial Of Service Vulnerabilities

Vipul Razor-agents is prone to multiple unspecified denial-of-service vulnerabilities:

- An issue resides in the discovery logic of Razor-agents.
- Another issue resides in the preprocessing code of Razor-agents.

Attackers may exploit both issues to cause a denial of service for the vulnerable application.

Vipul Razor-agents Multiple Unspecified Denial Of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Vipul Razor-agents Multiple Unspecified Denial Of Service Vulnerabilities

Solution:
The vendor has addressed these issues. Please see the references for details.


Vipul razor-agents 2.126

• SuSE razor-agents-2.126-122.i586.rpm
  SUSE Linux 8.2:
  ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/razor-agents-2.12 6-122.i586.rpm

Vipul razor-agents 2.34

• SuSE razor-agents-2.34-54.i586.rpm
  SUSE Linux 9.0:
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/razor-agents-2.34 -54.i586.rpm


• SuSE razor-agents-2.34-54.x86_64.rpm
  SUSE Linux 9.0:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/razor-agents- 2.34-54.x86_64.rpm

Vipul razor-agents 2.36

• SuSE razor-agents-2.36-59.4.i586.rpm
  SUSE Linux 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/razor-agents-2.36 -59.4.i586.rpm


• SuSE razor-agents-2.36-59.4.x86_64.rpm
  SUSE Linux 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/razor-agents- 2.36-59.4.x86_64.rpm

Vipul razor-agents 2.61

• SuSE razor-agents-2.61-3.2.i586.rpm
  SUSE Linux 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/razor-agents-2.61 -3.2.i586.rpm


• SuSE razor-agents-2.61-3.2.x86_64.rpm
  SUSE Linux 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/razor-agents-2. 61-3.2.x86_64.rpm

Vipul razor-agents 2.67

• Debian razor_2.670-1sarge2_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_alpha.deb


• Debian razor_2.670-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_amd64.deb


• Debian razor_2.670-1sarge2_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_arm.deb


• Debian razor_2.670-1sarge2_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_hppa.deb


• Debian razor_2.670-1sarge2_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_i386.deb


• Debian razor_2.670-1sarge2_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_ia64.deb


• Debian razor_2.670-1sarge2_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_m68k.deb


• Debian razor_2.670-1sarge2_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_mips.deb


• Debian razor_2.670-1sarge2_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_mipsel.deb


• Debian razor_2.670-1sarge2_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_powerpc.deb


• Debian razor_2.670-1sarge2_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_s390.deb


• Debian razor_2.670-1sarge2_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/r/razor/razor_2.670-1sarg e2_sparc.deb


• SuSE razor-agents-2.67-3.2.i586.rpm
  SUSE Linux 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/razor-agents-2.67 -3.2.i586.rpm


• SuSE razor-agents-2.67-3.2.x86_64.rpm
  SUSE Linux 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/razor-agents-2. 67-3.2.x86_64.rpm

Vipul razor-agents 2.70

• Vipul razor-agents-2.72.tar.gz
  http://prdownloads.sourceforge.net/razor/razor-agents-2.72.tar.gz?down load


• Vipul razor-agents-2.74.tar.bz2
  http://prdownloads.sourceforge.net/razor/razor-agents-2.74.tar.bz2?dow nload

Vipul razor-agents 2.71

• Vipul razor-agents-2.72.tar.gz
  http://prdownloads.sourceforge.net/razor/razor-agents-2.72.tar.gz?down load


• Vipul razor-agents-2.74.tar.bz2
  http://prdownloads.sourceforge.net/razor/razor-agents-2.74.tar.bz2?dow nload

Vipul razor-agents 2.72

• Vipul razor-agents-2.74.tar.bz2
  http://prdownloads.sourceforge.net/razor/razor-agents-2.74.tar.bz2?dow nload

Vipul Razor-agents Multiple Unspecified Denial Of Service Vulnerabilities

References:

• ANNOUNCE: razor-agents 2.71 (Vipul)
  
• ANNOUNCE: razor-agents 2.74 (Vipul)
  
• Razor-agents Homepage (Vipul)