Tenes Empanadas Graciela Remote Denial Of Service Vulnerability

Bugtraq ID:	16982
Class:	Design Error
CVE:	CVE-2006-1150
Remote:	Yes
Local:	No
Published:	Mar 06 2006 12:00AM
Updated:	Mar 21 2006 09:54PM
Credit:	This issue was disclosed by Luigi Auriemma.
Vulnerable:	TEG Tenes Empanadas Graciela 0.11.1
Not Vulnerable:

Tenes Empanadas Graciela Remote Denial Of Service Vulnerability


Tenes Empanadas Graciela is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the application to crash by activating the 'oldsocketmode' option, and then sending an overly large request to the server application.

An attacker may cause the application to crash, thus denying service to legitimate users.

Tenes Empanadas Graciela Remote Denial Of Service Vulnerability

This issue can be exploited via a client version of the application.

Tenes Empanadas Graciela Remote Denial Of Service Vulnerability

Solution:
A patch is available.


TEG Tenes Empanadas Graciela 0.11.1

• TEG teg-diff-CAN-2006-1150-debian
  http://bugs.debian.org/cgi-bin/bugreport.cgi/teg-diff-CAN-2006-1150-de bian?bug=357645;msg=17;att=1

Tenes Empanadas Graciela Remote Denial Of Service Vulnerability

References:

• Debian Bug report logs - #357645 - teg: [CAN-2006-1150] Remote DOS vulnerability (Justin Pryzby)
  
• Tenes Empanadas Graciela (TEG) - off-by-one (Luigi Auriemma)
  
• Tenes Empanadas Graciela Homepage (TEG)