ManageEngine OpManager 'multipartRequest' Servlet Remote Denial of Service Vulnerability

Bugtraq ID:	74405
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 29 2015 12:00AM
Updated:	Apr 29 2015 12:00AM
Credit:	Andrea Micalizzi (rgod)
Vulnerable:	ManageEngine OpManager 0
Not Vulnerable:	ManageEngine OpManager Build 11500

ManageEngine OpManager 'multipartRequest' Servlet Remote Denial of Service Vulnerability

ManageEngine OpManager is prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

ManageEngine OpManager 'multipartRequest' Servlet Remote Denial of Service Vulnerability

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

ManageEngine OpManager 'multipartRequest' Servlet Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ManageEngine OpManager 'multipartRequest' Servlet Remote Denial of Service Vulnerability

References:

• ManageEngine OpManager Homepage (AdventNet)
  
• ManageEngine OpManager MultipartRequestServlet fileName Denial of Service Vulner (HP)