Palm WebOS 'LunaSysMgr' Service Denial of Service Vulnerability

Bugtraq ID:	36659
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 13 2009 12:00AM
Updated:	Oct 13 2009 04:59PM
Credit:	Townsend Ladd Harris
Vulnerable:	Palm webOS 1.1 Palm webOS 1.0.4 Palm webOS 1.0.3
Not Vulnerable:	Palm webOS 1.2

Palm WebOS 'LunaSysMgr' Service Denial of Service Vulnerability

Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data.

Attackers can leverage this issue to cause an affected device to reboot. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Palm WebOS 1.1 is vulnerable; other versions may also be affected.

Palm WebOS 'LunaSysMgr' Service Denial of Service Vulnerability

The following proof-of-concept code is available:

<meta http-equiv="refresh" content="1">AAAAA... using 50280 or more characters after the refresh.

Palm WebOS 'LunaSysMgr' Service Denial of Service Vulnerability

Solution:
This issue has reportedly been addressed in WebOS 1.2. Please see the references for details.

Palm WebOS 'LunaSysMgr' Service Denial of Service Vulnerability

References:

• Palm Pre WebOS version <= 1.1 Floating Point Crash (Townsend Ladd Harris)
  
• Palm WebOS Homepage (Palm)
  
• webOS 1.2.0 (Palm)
  
• Palm Pre WebOS version <= 1.1 Floating Point Exception ([email protected])