C++ Sockets Library HTTP Headers Remote Denial Of Service Vulnerability

Bugtraq ID:	38021
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 30 2010 12:00AM
Updated:	Jan 30 2010 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	C++ Sockets Library C++ Sockets Library 2.3.8 C++ Sockets Library C++ Sockets Library 2.2.5 C++ Sockets Library C++ Sockets Library 2.2.4 C++ Sockets Library C++ Sockets Library 2.2.3 C++ Sockets Library C++ Sockets Library 2.2.2 C++ Sockets Library C++ Sockets Library 2.2.1 C++ Sockets Library C++ Sockets Library 2.2
Not Vulnerable:	C++ Sockets Library C++ Sockets Library 2.3.9

C++ Sockets Library HTTP Headers Remote Denial Of Service Vulnerability

C++ Sockets Library is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted HTML requests.

Remote attackers can exploit this issue to crash an application that uses the affected library, denying service to legitimate users.

This issue affects versions prior to C++ Sockets Library 2.3.9.

C++ Sockets Library HTTP Headers Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

C++ Sockets Library HTTP Headers Remote Denial Of Service Vulnerability

Solution:
The vendor released C++ Sockets Library 2.3.9 to address this issue. Please see the references for more information.

C++ Sockets Library HTTP Headers Remote Denial Of Service Vulnerability

References:

• All releases tagged security fix (C++ Sockets Library)
  
• C++ Sockets Library Homepage (C++ Sockets Library)