EtherApe 'get_rpc()' NULL Pointer Dereference Denial Of Service Vulnerability

Bugtraq ID:	49687
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 19 2011 12:00AM
Updated:	Sep 19 2011 12:00AM
Credit:	Marcus Meissner
Vulnerable:	EtherApe EtherApe 0.9.11 EtherApe EtherApe 0.9.10
Not Vulnerable:	EtherApe EtherApe 0.9.12

EtherApe 'get_rpc()' NULL Pointer Dereference Denial Of Service Vulnerability

EtherApe is prone to a remote denial-of-service vulnerability caused by a NULL pointer dereference error.

An attacker can exploit this issue to crash the application, resulting in a denial-of-service condition.

EtherApe 'get_rpc()' NULL Pointer Dereference Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EtherApe 'get_rpc()' NULL Pointer Dereference Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

EtherApe 'get_rpc()' NULL Pointer Dereference Denial Of Service Vulnerability

References:

• CVE Request? etherape remote crash (denial of service) (Marcus Meissner)
  
• EtherApe Homepage (EtherApe)
  
• NULL pointer causes coredump in address_to_str() - ID: 3309061 (David Goldfarb)