Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
BID:14769
Info
Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
| Bugtraq ID: | 14769 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 07 2005 12:00AM |
| Updated: | Sep 07 2005 12:00AM |
| Credit: | Martin Pala is credited with the discovery of this vulnerability. |
| Vulnerable: |
Distributed Checksum ClearingHouse DCC 1.3.15 Distributed Checksum ClearingHouse DCC 1.3.14 Distributed Checksum ClearingHouse DCC 1.3.13 Distributed Checksum ClearingHouse DCC 1.3.12 Distributed Checksum ClearingHouse DCC 1.3.11 Distributed Checksum ClearingHouse DCC 1.3.10 Distributed Checksum ClearingHouse DCC 1.3.9 Distributed Checksum ClearingHouse DCC 1.3.8 Distributed Checksum ClearingHouse DCC 1.3.7 Distributed Checksum ClearingHouse DCC 1.3.6 Distributed Checksum ClearingHouse DCC 1.3.5 Distributed Checksum ClearingHouse DCC 1.3.4 Distributed Checksum ClearingHouse DCC 1.3.3 Distributed Checksum ClearingHouse DCC 1.3.2 Distributed Checksum ClearingHouse DCC 1.3.1 Distributed Checksum ClearingHouse DCC 1.3 |
| Not Vulnerable: |
Distributed Checksum ClearingHouse DCC 1.3.16 |
Discussion
Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
Distributed Checksum ClearingHouse is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions.
A remote attacker can exploit this vulnerability to cause the affected application to crash, resulting in a denial of service to legitimate users. As the software is an anti-spam content filter, this may have other repercussions to the system.
Distributed Checksum ClearingHouse is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions.
A remote attacker can exploit this vulnerability to cause the affected application to crash, resulting in a denial of service to legitimate users. As the software is an anti-spam content filter, this may have other repercussions to the system.
Exploit / POC
Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
Solution:
The vendor has addressed this issue in the latest release of the software:
Distributed Checksum ClearingHouse DCC 1.3
Distributed Checksum ClearingHouse DCC 1.3.1
Distributed Checksum ClearingHouse DCC 1.3.10
Distributed Checksum ClearingHouse DCC 1.3.11
Distributed Checksum ClearingHouse DCC 1.3.12
Distributed Checksum ClearingHouse DCC 1.3.13
Distributed Checksum ClearingHouse DCC 1.3.14
Distributed Checksum ClearingHouse DCC 1.3.15
Distributed Checksum ClearingHouse DCC 1.3.2
Distributed Checksum ClearingHouse DCC 1.3.3
Distributed Checksum ClearingHouse DCC 1.3.4
Distributed Checksum ClearingHouse DCC 1.3.5
Distributed Checksum ClearingHouse DCC 1.3.6
Distributed Checksum ClearingHouse DCC 1.3.7
Distributed Checksum ClearingHouse DCC 1.3.8
Distributed Checksum ClearingHouse DCC 1.3.9
Solution:
The vendor has addressed this issue in the latest release of the software:
Distributed Checksum ClearingHouse DCC 1.3
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.1
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.10
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.11
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.12
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.13
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.14
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.15
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.2
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.3
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.4
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.5
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.6
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.7
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.8
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
Distributed Checksum ClearingHouse DCC 1.3.9
-
Distributed Checksum ClearingHouse dcc.tar.Z
http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z
References
Distributed Checksum ClearingHouse DCCIFD Denial Of Service Vulnerability
References:
References:
- DCC Changelog (Distributed Checksum ClearingHouse)
- DCC Homepage (Distributed Checksum ClearingHouse)