Foxit WAC Server Denial of Service Vulnerability

Bugtraq ID:	27142
Class:	Boundary Condition Error
CVE:	CVE-2008-0151
Remote:	Yes
Local:	No
Published:	Jan 04 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Luigi Auriemma is credited with the discovery of this vulnerability.
Vulnerable:	Foxit WAC Server 2.0 Build 3503
Not Vulnerable:

Foxit WAC Server Denial of Service Vulnerability

Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects Foxit WAC Server 2.0 Build 3503 and prior versions.

Foxit WAC Server Denial of Service Vulnerability

The following proof-of-concept exploits are available:

• /data/vulnerabilities/exploits/waccaz.zip
• /data/vulnerabilities/exploits/27142.zip

Foxit WAC Server Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Foxit WAC Server Denial of Service Vulnerability

References:

• Foxit Remote Access Server Denial of Service Vulnerability (Luigi Auriemma)
  
• Foxit Remote Access Server Homepage (Foxit)
  
• Some DoS in some telnet servers (Luigi Auriemma )
  
• Foxit Remote Access Server (WAC Server) (Luigi Auriemma)