EKG Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	24600
Class:	Design Error
CVE:	CVE-2007-1663 CVE-2007-1664 CVE-2007-1665
Remote:	Yes
Local:	No
Published:	Jun 23 2007 12:00AM
Updated:	Jul 05 2007 04:07PM
Credit:	The vendor disclosed these vulnerabilities.
Vulnerable:	Redhat Fedora 7 ekg ekg 2005-04-11 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha
Not Vulnerable:

EKG Multiple Remote Denial of Service Vulnerabilities

EKG is prone to multiple remote denial-of-service vulnerabilities because of design errors.

An attacker can trigger these issues to cause denial-of-service conditions to legitimate users of the application.

EKG Multiple Remote Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

EKG Multiple Remote Denial of Service Vulnerabilities

Solution:
Vendor upgrades are available. Please see the referenced advisories for more information.

EKG Multiple Remote Denial of Service Vulnerabilities

References:

• ekg Homepage (ekg)
  
• [SECURITY] [DSA 1318-1] New ekg packages fix denial of service (Moritz Muehlenhoff )