Paul Smith Computer Services VCAP Calendar Server Remote Denial of Service Vulnerability

Bugtraq ID:	19959
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 12 2006 12:00AM
Updated:	Sep 12 2006 07:07PM
Credit:	securma massine <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Paul Smith Computer Services vCAP Calendar Server 1.9 Beta
Not Vulnerable:

Paul Smith Computer Services VCAP Calendar Server Remote Denial of Service Vulnerability

vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error.

An attacker can exploit this issue to crash the application, effectively denying service.

vCAP Calendar Server 1.9.0 Beta and prior versions are vulnerable to this issue.

Paul Smith Computer Services VCAP Calendar Server Remote Denial of Service Vulnerability

Attackers use the vulnerable application to exploit this issue.

• /data/vulnerabilities/exploits/vcap_dos_poc.txt

Paul Smith Computer Services VCAP Calendar Server Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Paul Smith Computer Services VCAP Calendar Server Remote Denial of Service Vulnerability

References:

• Home Page (Paul Smith Computer Services)
  
• vCAP calendar server Multiple vulnerability (securma massine )