Pioneers Session Object Denial Of Service Vulnerability

Bugtraq ID:	26391
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-5933 CVE-2007-6010
Remote:	Yes
Local:	No
Published:	Nov 09 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	Bas Wijnen is credited with the discovery of this vulnerability.
Vulnerable:	Pioneers Pioneers 0.11.3 Pioneers Pioneers 0.11.2 Pioneers Pioneers 0.11 Gentoo Linux
Not Vulnerable:	Pioneers Pioneers 0.11.3-r1

Pioneers Session Object Denial Of Service Vulnerability

Pioneers is prone to a remote denial-of-service vulnerability.

An attacker could exploit this issue to crash the affected application, denying service to legitimate users.

Versions prior to Pioneers 0.11.3 are vulnerable.

Pioneers Session Object Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Pioneers Session Object Denial Of Service Vulnerability

Solution:
The vendor released Pioneers 0.11.3 to address this issue. Please see the references for more information.


Pioneers Pioneers 0.11.3

• Pioneers pioneers-0.11.3.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=5095&filesize= 2834584&filename=pioneers-0.11.3.tar.gz&2362869

Pioneers Session Object Denial Of Service Vulnerability

References:

• Pioneers 0.11.3 Released (Pioneer)
  
• Pioneers Homepage (Pioneers)