IOServer CVE-2013-2783 Infinite Loop Denial of Service Vulnerability

Bugtraq ID:	60450
Class:	Input Validation Error
CVE:	CVE-2013-2783
Remote:	Yes
Local:	No
Published:	Jun 10 2013 12:00AM
Updated:	Oct 21 2013 12:18AM
Credit:	Adam Crain and Chris Sistrunk
Vulnerable:
Not Vulnerable:

IOServer CVE-2013-2783 Infinite Loop Denial of Service Vulnerability

IOServer is prone to a remote denial-of-service vulnerability because it fails to properly handle user-supplied input.

Attackers can exploit this issue to force the application to enter into an infinite loop, causing it to consume large amounts of system resources. This can result in denial-of-service conditions.

IOServer 1.0.19.0 is vulnerable; other versions may also be affected.

IOServer CVE-2013-2783 Infinite Loop Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IOServer CVE-2013-2783 Infinite Loop Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IOServer CVE-2013-2783 Infinite Loop Denial of Service Vulnerability

References: