0verkill UDP Datagram Remote Denial of Service Vulnerability

Bugtraq ID:	18353
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 09 2006 12:00AM
Updated:	Jun 09 2006 09:41PM
Credit:	Federico Fazzi <[email protected]> is credited with the discovery of this issue.
Vulnerable:	0verkill 0verkill 0.16
Not Vulnerable:

0verkill UDP Datagram Remote Denial of Service Vulnerability

A denial-of-service vulnerability affects 0verkill. This issue is due to the application's failure to properly handle certain UDP datagrams.

The vulnerability allows remote attackers from external networks to crash the application, denying further service to legitimate users.

0verkill version 0.16 is vulnerable to this issue; other versions may also be affected.

0verkill UDP Datagram Remote Denial of Service Vulnerability

Sample exploit code has been provided:

• /data/vulnerabilities/exploits/f_0k-0.1.py

0verkill UDP Datagram Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

0verkill UDP Datagram Remote Denial of Service Vulnerability

References:

• 0verkill Homepage (0verkill)
  
• 0verkill 0.6, Remote integer overflow (Federico Fazzi )