Desktop Orbiter Resource Exhaustion Denial Of Service Vulnerability

Bugtraq ID:	7759
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 30 2003 12:00AM
Updated:	May 30 2003 12:00AM
Credit:	Discovery of this vulnerability credited to Luca Ercoli <[email protected]>.
Vulnerable:	Anfibia Desktop Orbiter 2.0 1
Not Vulnerable:

Desktop Orbiter Resource Exhaustion Denial Of Service Vulnerability

A denial of service vulnerability has been reported for Desktop Orbiter. The vulnerability exists due to the way the application handles connections. Specifically, for every open connection, a snapshot preview of the desktop is loaded into memory. Thus, numerous connections would result in a consumption of all available memory resources.

Desktop Orbiter Resource Exhaustion Denial Of Service Vulnerability

The following exploit was provided:

• /data/vulnerabilities/exploits/desktop-orbiter-dos.c

Desktop Orbiter Resource Exhaustion Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Desktop Orbiter Resource Exhaustion Denial Of Service Vulnerability

References:

• Desktop Orbiter (Anfibia)
  
• Remote DoS in Desktop Orbiter (Luca Ercoli )