Macromedia Flash Media Server 2 Administration Service Remote Denial of Service Vulnerability

Bugtraq ID:	15822
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 13 2005 12:00AM
Updated:	Dec 13 2005 12:00AM
Credit:	Discovery is credited to dr_insane.
Vulnerable:	Macromedia Flash Media Server Professional Edition 2.0 Macromedia Flash Media Server Origin Edition 2.0 Macromedia Flash Media Server Edge Edition 2.0 Macromedia Flash Media Server Developer Edition 2.0 Macromedia Flash Media Server 1.5
Not Vulnerable:

Macromedia Flash Media Server 2 Administration Service Remote Denial of Service Vulnerability

Macromedia Flash Media Server administration service is prone to a remote denial of service vulnerability.

Successful exploitation may trigger a crash or hang, denying service to legitimate users.

Macromedia Flash Media Server 2 Administration Service Remote Denial of Service Vulnerability

An exploit is not required.

The following proof of concept example is available:
c:\telnet [server] 1111
a

Macromedia Flash Media Server 2 Administration Service Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Macromedia Flash Media Server 2 Administration Service Remote Denial of Service Vulnerability

References:

• Flash Media Server Homepage (Adobe)
  
• Macromedia Flash Media Server 2 validation error (dr_insane)
  
• MPSB05-11 Administrator Interface Denial of Service Vulnerability in Flash Media (Macromedia)