PolyGen Local Denial of Service Vulnerability

Bugtraq ID:	14722
Class:	Design Error
CVE:	CVE-2005-2656
Remote:	No
Local:	Yes
Published:	Sep 01 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	Discovery is credited to Justin Rye.
Vulnerable:	PolyGen PolyGen 1.0.6 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1
Not Vulnerable:

PolyGen Local Denial of Service Vulnerability

PolyGen is prone to a local denial of service vulnerability.

A local attacker can potentially cause a denial of service condition due to resource exhaustion.

PolyGen 1.0.6 is affected by this vulnerability.

PolyGen Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PolyGen Local Denial of Service Vulnerability

Solution:
Debian has released advisory DSA 794-1 to address this issue. Please see the referenced advisory for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.


PolyGen PolyGen 1.0.6

• Debian polygen-data_1.0.6-7sarge1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/polygen/polygen-data_1. 0.6-7sarge1_all.deb


• Debian polygen_1.0.6-7sarge1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/polygen/polygen_1.0.6-7 sarge1_all.deb

PolyGen Local Denial of Service Vulnerability

References: