Symantec Quarantine Server Disconnect Denial Of Service Vulnerability

Bugtraq ID:	8306
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 28 2003 12:00AM
Updated:	Jul 28 2003 12:00AM
Credit:	This issue was discovered by the Qualys Security Research Team.
Vulnerable:	Symantec Quarantine Server 3.11 + Symantec AntiVirus Corporate Edition 8.0 1 Symantec Quarantine Server 3.2 + Symantec AntiVirus Corporate Edition 8.1 Symantec Quarantine Server 2.6 + Symantec Norton AntiVirus Corporate Edition 7.61
Not Vulnerable:	Symantec Quarantine Server 3.2 .0.9 + Symantec AntiVirus Corporate Edition 8.1 Symantec Quarantine Server 3.1 .0.9 + Symantec AntiVirus Corporate Edition 8.0 1 Symantec Quarantine Server 2.6 .0.2 + Symantec Norton AntiVirus Corporate Edition 7.61

Symantec Quarantine Server Disconnect Denial Of Service Vulnerability

Symantec Quarantine Server (qserver.exe), which is bundled in Symantec and Norton AntiVirus Corporate Edition, is prone to a denial of service vulnerability. This can occur when a user disconnects from the service before sending any data.

Symantec Quarantine Server Disconnect Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Symantec Quarantine Server Disconnect Denial Of Service Vulnerability

Solution:
Quarantine Server upgrades are available.

For QServer 2.6 users should upgrade to 2.6.0.2.
For QServer 3.11 users should upgrade to 3.1.0.9.
For QServer 3.2 users should upgrade to 3.2.0.9.

Symantec Quarantine Server Disconnect Denial Of Service Vulnerability

References:

• Denial of Service Vulnerability in Symantec Quarantine Server (Symantec)