Mathematica License Manager Connected Port Denial Of Service Vulnerability

Bugtraq ID:	3120
Class:	Design Error
CVE:	CVE-2001-1057
Remote:	Yes
Local:	No
Published:	Jul 30 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	This vulnerability was announced to Bugtraq by Pinwheel <[email protected]> on July 30, 2001.
Vulnerable:	Wolfram Research Mathematica 4.1 Wolfram Research Mathematica 4.0
Not Vulnerable:

Mathematica License Manager Connected Port Denial Of Service Vulnerability

Mathematica is a math calculation software package distributed and maintained by Wolfram Research.

The Mathematica License Manager does not correctly handle connection requests. Upon receiving a request from a client, the server does not fork established connections to a seperate port for service. Additionally, a client placing a request the server can not interpret is not disconnected.

This makes it possible for a remote user to deny service to legitimate users of the service.

Mathematica License Manager Connected Port Denial Of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Mathematica License Manager Connected Port Denial Of Service Vulnerability

References: