Sabre Desktop Reservation Software Client Denial Of Service Vulnerability

Bugtraq ID:	5974
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-1191
Remote:	Yes
Local:	No
Published:	Oct 16 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery of this issue is credited to Altomo <[email protected]>.
Vulnerable:	Sabre Desktop Reservation Software 4.4 G
Not Vulnerable:

Sabre Desktop Reservation Software Client Denial Of Service Vulnerability

Sabre Desktop Reservation Software is prone to a denial of service condition. It is possible to trigger this condition by sending malformed data to the Sabserv component, which listens on TCP port 1001. Sabserv is used to facilitate connections by the client software.

This condition may be exploited to deny service to the client software.

Sabre Desktop Reservation Software Client Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sabre Desktop Reservation Software Client Denial Of Service Vulnerability

Solution:
The vendor has reportedly stated that the vulnerable component (Sabserv) of Sabre Desktop Reservation Software for Windows will be fixed in the next maintenance release.

Sabre Desktop Reservation Software Client Denial Of Service Vulnerability

References: