SasCam Webcam Server 'GET' Request Remote Denial Of Service Vulnerability

Bugtraq ID:	40874
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 15 2010 12:00AM
Updated:	Jun 15 2010 12:00AM
Credit:	fl0 fl0w
Vulnerable:	SaschArt SasCam WebCam Server 2.6.5 SaschArt SasCam WebCam Server 2.7
Not Vulnerable:

SasCam Webcam Server 'GET' Request Remote Denial Of Service Vulnerability

SasCam Webcam Server is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to crash the application, denying service to legitimate users.

Note: Due to the nature of this issue, code execution may be possible but this has not been confirmed.

This issue affects the following:

SasCam Webcam Server 2.6.5 and prior
SasCam Webcam Server 2.7

SasCam Webcam Server 'GET' Request Remote Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/40874.c

SasCam Webcam Server 'GET' Request Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

SasCam Webcam Server 'GET' Request Remote Denial Of Service Vulnerability

References:

• SasCam Webcam Server Homepage (SaschArt)