POPFile Denial Of Service Vulnerability

Bugtraq ID:	16792
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-0876
Remote:	Yes
Local:	No
Published:	Feb 23 2006 12:00AM
Updated:	May 19 2006 09:48PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	POPFile POPFile 0.22.3 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	POPFile POPFile 0.22.4

POPFile Denial Of Service Vulnerability

A denial-of-service vulnerability has been reported in POPFile.

A remote attacker may cause a denial-of-service condition in the application, effectively halting service to legitimate users.

POPFile Denial Of Service Vulnerability

This exploit may be triggered by downloading a malicious email message.

POPFile Denial Of Service Vulnerability

Solution:
The vendor has released version 0.22.4. to address this issue.

Please see the references for vendor advisories and fixes.


POPFile POPFile 0.22.3

• POPFile popfile-0.22.4.zip
  http://prdownloads.sourceforge.net/popfile/popfile-0.22.4.zip

POPFile Denial Of Service Vulnerability

References:

• POPFile Release History (POPFile)
  
• POPFile Web Site (POPFile)