Secure Computing Webwasher Malformed URL Remote Denial of Service Vulnerability

Bugtraq ID:	28600
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-1797
Remote:	Yes
Local:	No
Published:	Apr 03 2008 12:00AM
Updated:	May 07 2015 05:30PM
Credit:	National Australia Bank Security Assurance
Vulnerable:	Securecomputing WebWasher 6.6.3 Securecomputing WebWasher 5.3
Not Vulnerable:	Securecomputing WebWasher 6.6.3 build 3150 Securecomputing WebWasher 5.3.0 build 3159

Secure Computing Webwasher Malformed URL Remote Denial of Service Vulnerability

Webwasher is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users.

These issues affect the following versions:

Webwasher 6.3.0 prior to build 3150
Webwasher 5.3.0 prior to build 3159

Secure Computing Webwasher Malformed URL Remote Denial of Service Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URL.

Secure Computing Webwasher Malformed URL Remote Denial of Service Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

Secure Computing Webwasher Malformed URL Remote Denial of Service Vulnerability

References:

• WebWasher Homepage (Secure Computing)
  
• WebWasher Denial of Service Vulnerability ([email protected])