Distributed Checksum Clearinghouse Unspecified Data Manipulation Vulnerability

Bugtraq ID:	22622
Class:	Access Validation Error
CVE:	CVE-2007-1047
Remote:	Yes
Local:	No
Published:	Feb 20 2007 12:00AM
Updated:	May 12 2015 07:34PM
Credit:	Vendor discovered this issue.
Vulnerable:	Distributed Checksum ClearingHouse DCC 1.3.16 Distributed Checksum ClearingHouse DCC 1.3.15 Distributed Checksum ClearingHouse DCC 1.3.14 Distributed Checksum ClearingHouse DCC 1.3.13 Distributed Checksum ClearingHouse DCC 1.3.12 Distributed Checksum ClearingHouse DCC 1.3.11 Distributed Checksum ClearingHouse DCC 1.3.10 Distributed Checksum ClearingHouse DCC 1.3.9 Distributed Checksum ClearingHouse DCC 1.3.8 Distributed Checksum ClearingHouse DCC 1.3.7 Distributed Checksum ClearingHouse DCC 1.3.6 Distributed Checksum ClearingHouse DCC 1.3.5 Distributed Checksum ClearingHouse DCC 1.3.4 Distributed Checksum ClearingHouse DCC 1.3.3 Distributed Checksum ClearingHouse DCC 1.3.2 Distributed Checksum ClearingHouse DCC 1.3.1 Distributed Checksum ClearingHouse DCC 1.3
Not Vulnerable:	Distributed Checksum ClearingHouse DCC 1.3.51

Distributed Checksum Clearinghouse Unspecified Data Manipulation Vulnerability

DCC is prone to a vulnerability that may allow attackers to manipulate data in '/var/dcc/maps'.

DCC versions prior to 1.3.51 are vulnerable.

Distributed Checksum Clearinghouse Unspecified Data Manipulation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Distributed Checksum Clearinghouse Unspecified Data Manipulation Vulnerability

Solution:
The vendor has addressed this issue in the latest release of the software.

Distributed Checksum Clearinghouse Unspecified Data Manipulation Vulnerability

References:

• DCC Changelog (Distributed Checksum ClearingHouse)
  
• DCC Homepage (Distributed Checksum ClearingHouse)