checkpw CVE-2015-0885 Denial of Service Vulnerability

Bugtraq ID:	72856
Class:	Input Validation Error
CVE:	CVE-2015-0885
Remote:	Yes
Local:	No
Published:	Feb 27 2015 12:00AM
Updated:	Feb 27 2015 12:00AM
Credit:	Hiroya Ito
Vulnerable:	checkpw checkpw 1.02
Not Vulnerable:	checkpw checkpw 1.03

checkpw CVE-2015-0885 Denial of Service Vulnerability

checkpw is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions; denying service to legitimate users.

checkpw 1.02 is vulnerable; other versions may also be affected.

checkpw CVE-2015-0885 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

checkpw CVE-2015-0885 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

checkpw CVE-2015-0885 Denial of Service Vulnerability

References:

• checkpw - Homepage (checkpw)
  
• checkpw vulnerable to denial-of-service (DoS) (JPCERT)