Blue Coat Systems WinProxy Telnet Remote Denial Of Service Vulnerability

Bugtraq ID:	16149
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-3654
Remote:	Yes
Local:	No
Published:	Jan 05 2006 12:00AM
Updated:	Jan 05 2006 12:00AM
Credit:	The discoverer of this vulnerability wishes to remain anonymous.
Vulnerable:	Blue Coat Systems WebProxy 6.0
Not Vulnerable:	Blue Coat Systems WebProxy 6.1 a

Blue Coat Systems WinProxy Telnet Remote Denial Of Service Vulnerability

WinProxy is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to properly handle user-supplied data.

A remote attacker can exploit this issue to crash the server denying service to legitimate users. Remote code execution may be possible but is unlikely.

This issue affects WinProxy version 6.0; earlier versions are also likely vulnerable.

Blue Coat Systems WinProxy Telnet Remote Denial Of Service Vulnerability

No exploit is required.

Blue Coat Systems WinProxy Telnet Remote Denial Of Service Vulnerability

Solution:
The vendor has released version 6.1a addressing this and other issues. Users are advised to contact the vendor for details on obtaining the appropriate update.

Blue Coat Systems WinProxy Telnet Remote Denial Of Service Vulnerability

References:

• WinProxy Home Page (Blue Coat Systems)
  
• WinProxy: Release Notes (Blue Coat Systems)
  
• iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability ("[email protected]" )