Retired: SlackRoll Malicious Package Denial of Service Vulnerability

Bugtraq ID:	24739
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 02 2007 12:00AM
Updated:	Jul 05 2007 11:27PM
Credit:	The vendor disclosed this issue.
Vulnerable:	SlackRoll SlackRoll 9 SlackRoll SlackRoll 8 SlackRoll SlackRoll 7 SlackRoll SlackRoll 6 SlackRoll SlackRoll 5 SlackRoll SlackRoll 4 SlackRoll SlackRoll 3 SlackRoll SlackRoll 2 SlackRoll SlackRoll 1
Not Vulnerable:	SlackRoll SlackRoll 10

Retired: SlackRoll Malicious Package Denial of Service Vulnerability

SlackRoll is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects versions prior to SlackRoll 10.

Further analysis reveals that this issue is not exploitable; therefore, this BID is being retired.

Retired: SlackRoll Malicious Package Denial of Service Vulnerability

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Retired: SlackRoll Malicious Package Denial of Service Vulnerability

Solution:
The vendor has addressed these issues in SlackRoll 10. Please see the references for more information.

Retired: SlackRoll Malicious Package Denial of Service Vulnerability

References:

• SlackRoll Home Page (SlackRoll)
  
• SlackRoll Version 10 Release Notes (SlackRoll)