WorldSpan Res Manager Malformed TCP Packet Denial Of Service Vulnerability

Bugtraq ID:	5169
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-1029
Remote:	Yes
Local:	No
Published:	Jul 04 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovery credited to "altomo" <[email protected]>.
Vulnerable:	WorldSpan Res Manager 4.1
Not Vulnerable:

WorldSpan Res Manager Malformed TCP Packet Denial Of Service Vulnerability

It has been reported that WorldSpan Res Manager 4.1 for Microsoft Windows is vulnerable to a denial of service condition.

Res Manager systems are connected to Worldspan via private lines or through the Internet. Before accessing Worldspan, clients must first go through a local gateway, which accepts connections from Res Manager clients via TCP port 17990. If a malformed packet is sent to this port, the gateway software attempts to process the packet and eventually crashes.

WorldSpan Res Manager Malformed TCP Packet Denial Of Service Vulnerability

An exploit has been provided by "altomo" <[email protected]>:

• /data/vulnerabilities/exploits/worldspan.pl

WorldSpan Res Manager Malformed TCP Packet Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WorldSpan Res Manager Malformed TCP Packet Denial Of Service Vulnerability

References:

• Home Page (WorldSpan)