iParty Conferencing Server Denial Of Service Vulnerability

Bugtraq ID:	6844
Class:	Boundary Condition Error
CVE:	CVE-1999-1566
Remote:	Yes
Local:	No
Published:	May 08 1999 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Discovery of this vulnerability has been credited to: wh00t X <[email protected]>
Vulnerable:	Intel Corporation iParty Conferencing server 1.2
Not Vulnerable:

iParty Conferencing Server Denial Of Service Vulnerability

A buffer overflow condition has been discovered in the Intel iParty server.

It is possible to trigger a denial of service by submitting an excessive number of characters to the network port used by the iParty server. The server will need to be restarted to regain normal functionality.

This issue may be due to a buffer overrun, potentially resulting in arbitrary code execution. This possibility has not been confirmed.

iParty Conferencing Server Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

iParty Conferencing Server Denial Of Service Vulnerability

References:

• iParty Daemon Vulnerability (wh00t X )