DeleGate Multiple Denial of Service Vulnerabilities

Bugtraq ID:	26174
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 23 2007 12:00AM
Updated:	Oct 25 2007 02:36AM
Credit:	The vendor disclosed these issues.
Vulnerable:	DeleGate DeleGate 9.7.4 DeleGate DeleGate 9.7.3 DeleGate DeleGate 9.7.2 DeleGate DeleGate 9.7.1 DeleGate DeleGate 9.6.3 DeleGate DeleGate 9.6.2 DeleGate DeleGate 9.5.6 DeleGate DeleGate 9.4.4 DeleGate DeleGate 9.4.3 DeleGate DeleGate 9.4.2 DeleGate DeleGate 9.4.1 DeleGate DeleGate 9.4 DeleGate DeleGate 9.3.2 DeleGate DeleGate 9.2.4 DeleGate DeleGate 9.2.3 DeleGate DeleGate 9.2.2 DeleGate DeleGate 9.2 DeleGate DeleGate 9.1.1 DeleGate DeleGate 9.0.6 DeleGate DeleGate 9.0.5 DeleGate DeleGate 9.0.4 DeleGate DeleGate 9.0.3 DeleGate DeleGate 9.0.2 DeleGate DeleGate 9.0.1 DeleGate DeleGate 9.0 DeleGate DeleGate 8.11.6 DeleGate DeleGate 8.11.5 DeleGate DeleGate 8.11.4 DeleGate DeleGate 8.11.3 DeleGate DeleGate 8.11.2 DeleGate DeleGate 8.11.1 DeleGate DeleGate 8.11 DeleGate DeleGate 8.10.6 DeleGate DeleGate 8.10.5 DeleGate DeleGate 8.10.4 DeleGate DeleGate 8.10.3 DeleGate DeleGate 8.9.6 DeleGate DeleGate 8.9.5 DeleGate DeleGate 8.9.4 DeleGate DeleGate 8.9.3 DeleGate DeleGate 8.9.2 DeleGate DeleGate 8.9.1 DeleGate DeleGate 8.9 DeleGate DeleGate 8.5 .0 DeleGate DeleGate 8.4 .0 DeleGate DeleGate 8.3.4 DeleGate DeleGate 8.3.3
Not Vulnerable:	DeleGate DeleGate 9.7.5

DeleGate Multiple Denial of Service Vulnerabilities

DeleGate is prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to crash the affected server, block access to the affected server, or cause other denial-of-service conditions. Given the nature of some of these issues, attackers may also be able to execute code, but this has not been confirmed.

Versions prior to DeleGate 9.7.5 may be affected.

DeleGate Multiple Denial of Service Vulnerabilities

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

NOTE: Exploiting some of these issues may not require specific exploit code.

DeleGate Multiple Denial of Service Vulnerabilities

Solution:
The vendor addressed these issues in recent updates. Please see the references for more information.

DeleGate Multiple Denial of Service Vulnerabilities

References:

• [DeleGate-En] DeleGate/9.7.1 (STABLE) -- fixed infinite loop and SEGV on BSD and (DeleGate)
  
• [DeleGate-En] DeleGate/9.7.4 (STABLE) -- fix for buffer overflow and support for (DeleGate)
  
• [DeleGate-En] DeleGate/9.7.5 (STABLE) -- fixes for SEGV and freezing in HTTP (DeleGate)
  
• DeleGate (DeleGate)