BID:32987

Psi Malformed Packet Remote Denial of Service Vulnerability

Info

Psi Malformed Packet Remote Denial of Service Vulnerability

Bugtraq ID:	32987
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-6393
Remote:	Yes
Local:	No
Published:	Dec 23 2008 12:00AM
Updated:	Mar 16 2009 03:56PM
Credit:	sha0
Vulnerable:	S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Psi Psi 0.12 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0

Not Vulnerable:

Discussion

Psi Malformed Packet Remote Denial of Service Vulnerability

Psi is prone to a remote denial-of-service vulnerability.

Exploiting this issue may allow attackers to cause the application to crash, denying service to legitimate users.

This issue affects Psi 0.12; other versions may also be vulnerable.

Exploit / POC

Psi Malformed Packet Remote Denial of Service Vulnerability

Attackers can exploit the issue using readily available network tools.

The following exploit is available:

/data/vulnerabilities/exploits/32987.py

Solution / Fix

Psi Malformed Packet Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Debian Linux 5.0 hppa