CSWorks LiveData Service Crafted TCP Packets Denial of Service Vulnerability

Bugtraq ID:	50458
Class:	Unknown
CVE:	CVE-2011-3996
Remote:	Yes
Local:	No
Published:	Oct 27 2011 12:00AM
Updated:	Oct 27 2011 12:00AM
Credit:	Kuang-Chun Hung, Security Research and Service Institute - Information and Communication Security Technology Center (ICST), Taiwan R.O.C
Vulnerable:	CSWorks CSWorks 2.0.4115 0
Not Vulnerable:	CSWorks CSWorks 2.0.4115 1

CSWorks LiveData Service Crafted TCP Packets Denial of Service Vulnerability

CSWorks is prone to a denial-of-service vulnerability that affects the LiveData Service.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users.

CSWorks versions prior to 2.0.4115.1 are affected.

CSWorks LiveData Service Crafted TCP Packets Denial of Service Vulnerability

Currently we are not aware of any publicly available exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

CSWorks LiveData Service Crafted TCP Packets Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

CSWorks LiveData Service Crafted TCP Packets Denial of Service Vulnerability

References:

• CSWorks Homepage (CSWorks)
  
• JVN#98649286 CSWorks LiveData Service vulnerable to denial-of-service (DoS) (JVN)
  
• Important: CSWorks security release 2.0.4115.1 (CSWorks)