ENet Multiple Denial of Service Vulnerabilities

Bugtraq ID:	17087
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 13 2006 12:00AM
Updated:	Mar 15 2006 05:45AM
Credit:	Luigi Auriemma discovered these vulnerabilities.
Vulnerable:	bespin.org Enet Jun.2005 bespin.org Enet Jul.2005
Not Vulnerable:

ENet Multiple Denial of Service Vulnerabilities

ENet is prone to multiple denial-of-service vulnerabilities. A remote attacker can send specifically crafted data to trigger these flaws, leading to a denial-of-service condition.

ENet Multiple Denial of Service Vulnerabilities


No exploit is required.

Example code designed to trigger these issues is available:

• /data/vulnerabilities/exploits/enet_exploit.c

ENet Multiple Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

ENet Multiple Denial of Service Vulnerabilities

References:

• ENet library Web Site (bespin.org)
  
• Multiple vulnerabilities in ENet library (Jul 2005) (Luigi Auriemma )