Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Service Vulnerability

Bugtraq ID:	26088
Class:	Unknown
CVE:	CVE-2007-5481
Remote:	Yes
Local:	No
Published:	Oct 16 2007 12:00AM
Updated:	Oct 26 2007 11:26PM
Credit:	The vendor credits Tomasz Potega with the discovery of this issue.
Vulnerable:	Distributed Checksum ClearingHouse DCC 1.3.65
Not Vulnerable:	Distributed Checksum ClearingHouse DCC 1.3.66

Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Service Vulnerability

Distributed Checksum Clearinghouse (DCC) is prone to an unspecified denial-of-service vulnerability.

An attacker can exploit this issue to deny access to legitimate users.

This issue affects DCC 1.3.65; other versions may also be vulnerable.

Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Service Vulnerability

Solution:
The vendor released DCC 1.3.66 to address this issue. Please see the references for more information.


Distributed Checksum ClearingHouse DCC 1.3.65

• Distributed Checksum ClearingHouse DCC version 1.3.66
  http://www.rhyolite.com/anti-spam/dcc/source/dcc.tar.Z

Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Service Vulnerability

References:

• DCC Changelog (Distributed Checksum ClearingHouse)
  
• DCC Homepage (Distributed Checksum ClearingHouse)