Red Hat Enterprise MRG Messaging Multiple Denial of Service Vulnerabilities

Bugtraq ID:	44113
Class:	Unknown
CVE:	CVE-2009-5005 CVE-2009-5006
Remote:	Yes
Local:	No
Published:	Oct 14 2010 12:00AM
Updated:	Oct 14 2010 12:00AM
Credit:	Red Hat
Vulnerable:	RedHat Enterprise MRG v1 for Red Hat Enterprise Linux ES version 4 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux AS verison 4 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux version 5
Not Vulnerable:

Red Hat Enterprise MRG Messaging Multiple Denial of Service Vulnerabilities

Red Hat Enterprise MRG Messaging is prone to multiple remote denial-of-service vulnerabilities.

Successful exploits may allow an attacker to crash the affected application, resulting in a denial-of-service condition.

The following are affected:

Red Hat Enterprise MRG v1 for Enterprise Linux AS (version 4)
Red Hat Enterprise MRG v1 for Enterprise Linux ES (version 4)
Red Hat Enterprise MRG v1 for Red Hat Enterprise Linux (version 5)

Red Hat Enterprise MRG Messaging Multiple Denial of Service Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Red Hat Enterprise MRG Messaging Multiple Denial of Service Vulnerabilities

Solution:
Vendor patch is available. Please see the references for more information.

Red Hat Enterprise MRG Messaging Multiple Denial of Service Vulnerabilities

References:

• Red Hat Homepage (Red Hat)
  
• RHSA-2010:0773-1 (Red Hat)
  
• RHSA-2010:0774-1 (Red Hat)