WebWasher Remote ARJ Decoder Denial of Service Vulnerability

Bugtraq ID:	18521
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 19 2006 12:00AM
Updated:	Jun 20 2006 06:50PM
Credit:	The vendor disclosed this issue. The original discoverer of this issue is currently unknown.
Vulnerable:	Webwasher Webwasher CSM Suite 5.3 Webwasher Webwasher CSM Suite 5.0
Not Vulnerable:	Webwasher Webwasher CSM Suite 5.3 build 2252

WebWasher Remote ARJ Decoder Denial of Service Vulnerability

WebWasher is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed archive files.

This issue allows remote attackers to crash the affected application, potentially denying service to legitimate users.

Versions of WebWasher prior to version 5.3.0 build 2252 are vulnerable to this issue.

WebWasher Remote ARJ Decoder Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WebWasher Remote ARJ Decoder Denial of Service Vulnerability

Solution:
The vendor has released version 5.3.0 build 2252 to address this issue. Please contact the vendor for more information on obtaining and applying fixes.

WebWasher Remote ARJ Decoder Denial of Service Vulnerability

References:

• Webwasher Classic Product Homepage (Webwasher)